General
- Target 2026-07-02_a3055de704f9addfb20349b6635dd395_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_rex_snatch
- Size 24.2MB
- Sample260702-ymsjdsdx4s
- SHA256 6e327b950d94e82a28f51776ee100400043bca93dd57978444d2c8e5db420661
- MD5 a3055de704f9addfb20349b6635dd395
- SHA1 a345a58f51cba3992fb7ae45c325d882b5620405
- SHA512 d790d001e4f803b9f286f5242c4d7fab3cd2a8d36c4b011bf9537606e6e81410576b5ba9ec2c6cf69d0d9c3bb2d54ee605413d774f43a63b9d3d464b8281f0ef
- SSDEEP 196608:kJh563Q7qLIOAriQ3xYD1aAt92LIV3oNzPvXlaFvxqyb36br2XwtcYBH85dMFsKI:0oMqLICE2XvPmewro
- TLSH T172471743F8A5C5A4C0998130C662D5D37A7278954B6423C73BECBF2E2FB2BD0967A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_a3055de704f9addfb20349b6635dd395_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_rex_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a3055de704f9addfb20349b6635dd395_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_rex_snatch.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a3055de704f9addfb20349b6635dd395_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_rex_snatch
- Size 24.2MB
- SHA256 6e327b950d94e82a28f51776ee100400043bca93dd57978444d2c8e5db420661
- MD5 a3055de704f9addfb20349b6635dd395
- SHA1 a345a58f51cba3992fb7ae45c325d882b5620405
- SHA512 d790d001e4f803b9f286f5242c4d7fab3cd2a8d36c4b011bf9537606e6e81410576b5ba9ec2c6cf69d0d9c3bb2d54ee605413d774f43a63b9d3d464b8281f0ef
- SSDEEP 196608:kJh563Q7qLIOAriQ3xYD1aAt92LIV3oNzPvXlaFvxqyb36br2XwtcYBH85dMFsKI:0oMqLICE2XvPmewro
- TLSH T172471743F8A5C5A4C0998130C662D5D37A7278954B6423C73BECBF2E2FB2BD0967A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)