General
- Target 2026-06-30_f7d00c09b3df52758ff146f44049928a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.2MB
- Sample260701-cf3vwsct8k
- SHA256 d289f53960a2bc30a30dc409c6b3bcf0792776fbd5a54717a019929e4b65947f
- MD5 f7d00c09b3df52758ff146f44049928a
- SHA1 ddfbe5f0a1a6a8a6229837de4415139713c92b0c
- SHA512 a6fbf867687069ca1d2d2b1ea216e19260057ff5e438158e68caa70f944c6f0018520f91788c2e2796ef2c5a3883837ddd68161ba267dec87a0b3e9f970f2312
- SSDEEP 49152:9V6dafQo5zOmJT67duP5azqF5hvV1MOp5Ed9chRKfK8WI5kyg06Q0zClqyQeSbzo:9VEaoSO7lNE4CLTrSqTk0CVHxi7E
- TLSH T138C62947E8A505E5C0AEC175CA769952BE713C884B3063D36F60FA292F37BD06EB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-30_f7d00c09b3df52758ff146f44049928a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_f7d00c09b3df52758ff146f44049928a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_f7d00c09b3df52758ff146f44049928a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.2MB
- SHA256 d289f53960a2bc30a30dc409c6b3bcf0792776fbd5a54717a019929e4b65947f
- MD5 f7d00c09b3df52758ff146f44049928a
- SHA1 ddfbe5f0a1a6a8a6229837de4415139713c92b0c
- SHA512 a6fbf867687069ca1d2d2b1ea216e19260057ff5e438158e68caa70f944c6f0018520f91788c2e2796ef2c5a3883837ddd68161ba267dec87a0b3e9f970f2312
- SSDEEP 49152:9V6dafQo5zOmJT67duP5azqF5hvV1MOp5Ed9chRKfK8WI5kyg06Q0zClqyQeSbzo:9VEaoSO7lNE4CLTrSqTk0CVHxi7E
- TLSH T138C62947E8A505E5C0AEC175CA769952BE713C884B3063D36F60FA292F37BD06EB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.