General
- Target 2026-06-30_09a1f0ca99609c62397b8c95ee675f3e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 8.1MB
- Sample260701-a9y3padv5v
- SHA256 5a44e35b2bf4dbd8c30535d711e665a4546b515ba5a03169d273a02eeae9c8c5
- MD5 09a1f0ca99609c62397b8c95ee675f3e
- SHA1 7708cd4242044377d52ce80effe021f76e8d57dc
- SHA512 127d26169795d15a411e85e0e9ac14ea672afdf738c3237fb79d165de06f3425dbea54d660debb92d6ad22e376a5395c0e8b8bbab5d444254e1c1f0768c0274d
- SSDEEP 49152:bx3m+VEzjyev31Tfp83JHxq9Jwj481yNfiv/y3V9N7AVjIybqEWAaYiJYzV8jhVb:bx2aayv/y3BYI2aPpVoQMtE/
- TLSH T181864957ECA655E9C0ADC130C6329123BB717C890B3123D72B54F6282F76BD0AEB9758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-30_09a1f0ca99609c62397b8c95ee675f3e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_09a1f0ca99609c62397b8c95ee675f3e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_09a1f0ca99609c62397b8c95ee675f3e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 8.1MB
- SHA256 5a44e35b2bf4dbd8c30535d711e665a4546b515ba5a03169d273a02eeae9c8c5
- MD5 09a1f0ca99609c62397b8c95ee675f3e
- SHA1 7708cd4242044377d52ce80effe021f76e8d57dc
- SHA512 127d26169795d15a411e85e0e9ac14ea672afdf738c3237fb79d165de06f3425dbea54d660debb92d6ad22e376a5395c0e8b8bbab5d444254e1c1f0768c0274d
- SSDEEP 49152:bx3m+VEzjyev31Tfp83JHxq9Jwj481yNfiv/y3V9N7AVjIybqEWAaYiJYzV8jhVb:bx2aayv/y3BYI2aPpVoQMtE/
- TLSH T181864957ECA655E9C0ADC130C6329123BB717C890B3123D72B54F6282F76BD0AEB9758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.