General
- Target 2026-07-02_4e857d76f3b16efb248dad035682d6a7_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 9.6MB
- Sample260702-jmaagscv3r
- SHA256 c5df3a8dadc3b1505333c9fe213d59b0474dc5993345f450de082b8d5cfc218e
- MD5 4e857d76f3b16efb248dad035682d6a7
- SHA1 27f3ce04965717c2b6d95e8a1bfb0665d8883371
- SHA512 f03dec2916dc62648a882b62a6ced042d52a9000f5a89927b19a6f53181d4d785ad52eabca8ac35aed058b2b22c0f9921993d79674aa08ade1c09635bbbd03b8
- SSDEEP 49152:3do8Uo5pqBBeaoJecBEA4d6NakulTJziTdJ2owinvWZJZOrPvkQsieyG9rQhLjc:3dn9+YWQ2BivHv3SUxcyBfhRKE
- TLSH T1D4A64A47ECA514E9C1ADC632897691177B727C490B2167D71B60F7382F32BE8AEB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_4e857d76f3b16efb248dad035682d6a7_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_4e857d76f3b16efb248dad035682d6a7_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_4e857d76f3b16efb248dad035682d6a7_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 9.6MB
- SHA256 c5df3a8dadc3b1505333c9fe213d59b0474dc5993345f450de082b8d5cfc218e
- MD5 4e857d76f3b16efb248dad035682d6a7
- SHA1 27f3ce04965717c2b6d95e8a1bfb0665d8883371
- SHA512 f03dec2916dc62648a882b62a6ced042d52a9000f5a89927b19a6f53181d4d785ad52eabca8ac35aed058b2b22c0f9921993d79674aa08ade1c09635bbbd03b8
- SSDEEP 49152:3do8Uo5pqBBeaoJecBEA4d6NakulTJziTdJ2owinvWZJZOrPvkQsieyG9rQhLjc:3dn9+YWQ2BivHv3SUxcyBfhRKE
- TLSH T1D4A64A47ECA514E9C1ADC632897691177B727C490B2167D71B60F7382F32BE8AEB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.