General
- Target 2026-06-29_b5bf19a4bd332b17487362801083d9ba_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.6MB
- Sample260630-e7b8cse17j
- SHA256 3a2524ff2d4c2078c3f935b691c8b0440fe54fc83028b39a4701a502c6f71942
- MD5 b5bf19a4bd332b17487362801083d9ba
- SHA1 31ef6cde89d3bda125197458921e0be00f52cdba
- SHA512 e98c5183bc1c78f91cbc0ba19b4d0509b47186dd0b5f5c9969488d5b05d057b96a71e9f262d71459092a0d09048c96bb4539dc1d51043100268bf2c9b0452d8a
- SSDEEP 98304:X6zh4O9fd1xCngvQrLF/zn/kBot306zUUTOWGsg+fDoaYUqBLB+RrE:KmWxCP/F/z/8liDs+u
- TLSH T1D8C64927ECA555E4C4ADC2348A72A6627B317C494B3063D72B50F6243FB3BE06DB9364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-29_b5bf19a4bd332b17487362801083d9ba_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b5bf19a4bd332b17487362801083d9ba_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b5bf19a4bd332b17487362801083d9ba_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.6MB
- SHA256 3a2524ff2d4c2078c3f935b691c8b0440fe54fc83028b39a4701a502c6f71942
- MD5 b5bf19a4bd332b17487362801083d9ba
- SHA1 31ef6cde89d3bda125197458921e0be00f52cdba
- SHA512 e98c5183bc1c78f91cbc0ba19b4d0509b47186dd0b5f5c9969488d5b05d057b96a71e9f262d71459092a0d09048c96bb4539dc1d51043100268bf2c9b0452d8a
- SSDEEP 98304:X6zh4O9fd1xCngvQrLF/zn/kBot306zUUTOWGsg+fDoaYUqBLB+RrE:KmWxCP/F/z/8liDs+u
- TLSH T1D8C64927ECA555E4C4ADC2348A72A6627B317C494B3063D72B50F6243FB3BE06DB9364
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Executes dropped EXE
-
Checks whether UAC is enabled