General
- Target 2026-06-30_c83f53cd33fb12ad9e9dac7d179272db_coinminer_dosia_eternalromance_glassworm_ngrbot_poet-rat_quasar-rat_snatch_zxxz
- Size 127.5MB
- Sample260701-db3vrsey7t
- SHA256 32a1f7a9895aba25382c49fa253bc475d05a3518fcb6828d232550b24b6b1466
- MD5 c83f53cd33fb12ad9e9dac7d179272db
- SHA1 050f1b96205595ceb5bd69dc2bb652b494d2900b
- SHA512 e47724c84ac123371cee8a1e9e5e58fd94a8417fe056c736db9b28f39dcb86b9413496124fe3a27c7e2a77bfd05e8887e827670c5199d8c241c36e8cdb0edde1
- SSDEEP 393216:ctF/dUgZm01FkE5MrCLZwn2ArqnnvnxIYk7ZsKRjVN/NYb:ct8gw01WrrC6n2lvyx7ZsKRjD
- TLSH T163584B63F4E2B154C4D9C171C672C1EBBA623859172823E733DCAB2A5B32BD0D6B2745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_c83f53cd33fb12ad9e9dac7d179272db_coinminer_dosia_eternalromance_glassworm_ngrbot_poet-rat_quasar-rat_snatch_zxxz.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_c83f53cd33fb12ad9e9dac7d179272db_coinminer_dosia_eternalromance_glassworm_ngrbot_poet-rat_quasar-rat_snatch_zxxz.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_c83f53cd33fb12ad9e9dac7d179272db_coinminer_dosia_eternalromance_glassworm_ngrbot_poet-rat_quasar-rat_snatch_zxxz
- Size 127.5MB
- SHA256 32a1f7a9895aba25382c49fa253bc475d05a3518fcb6828d232550b24b6b1466
- MD5 c83f53cd33fb12ad9e9dac7d179272db
- SHA1 050f1b96205595ceb5bd69dc2bb652b494d2900b
- SHA512 e47724c84ac123371cee8a1e9e5e58fd94a8417fe056c736db9b28f39dcb86b9413496124fe3a27c7e2a77bfd05e8887e827670c5199d8c241c36e8cdb0edde1
- SSDEEP 393216:ctF/dUgZm01FkE5MrCLZwn2ArqnnvnxIYk7ZsKRjVN/NYb:ct8gw01WrrC6n2lvyx7ZsKRjD
- TLSH T163584B63F4E2B154C4D9C171C672C1EBBA623859172823E733DCAB2A5B32BD0D6B2745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.