General

  • Target
    2026-06-26_fc718ade23fc8159cf71b939dfb8cb6c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
  • Size 11.0MB
  • Sample260629-mxgn4abs4s
  • SHA256 cb4785f9348b8a9c3cc256daeb4f62e081f69c8c6c9d3a6757588d7c7a431890
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-06-26_fc718ade23fc8159cf71b939dfb8cb6c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
    • Size 11.0MB
    • SHA256 cb4785f9348b8a9c3cc256daeb4f62e081f69c8c6c9d3a6757588d7c7a431890
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks