General
- Target 2026-07-05_6f8617ca042ef0953c880867c410aecc_coinminer_dosia_eternalromance_glassworm_poet-rat_quasar-rat_snatch
- Size 28.4MB
- Sample260705-eaqpgshs7s
- SHA256 aaa4ef5b2cbbd7bb2eeb7bc0646e587ee184b3e9f61d6eca5979829449f67c54
- MD5 6f8617ca042ef0953c880867c410aecc
- SHA1 e46c6fac80bb4d7c1effa61239efaa1ae89876ce
- SHA512 83de83cef44ae5d0f01819ddcfa29addcef0d4e67eb73e7fd8a386c78706fee2865cf266c4a2cc4f6d6aa9d423373ee297e2218f08a512441c4d4e421c02751b
- SSDEEP 98304:pEKlanjsGnc0PfosXiSWhT9jPAcPruBbI0cJiddvO0gM/wDTBBPpqOFAoMEim:ytDnVwjcb0JbT4wDIOFAai
- TLSH T171676C9BF96A11D1C6ADC370DA6658237B723CAD172063C72764B9102F77BC86DBA310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-05_6f8617ca042ef0953c880867c410aecc_coinminer_dosia_eternalromance_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_6f8617ca042ef0953c880867c410aecc_coinminer_dosia_eternalromance_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_6f8617ca042ef0953c880867c410aecc_coinminer_dosia_eternalromance_glassworm_poet-rat_quasar-rat_snatch
- Size 28.4MB
- SHA256 aaa4ef5b2cbbd7bb2eeb7bc0646e587ee184b3e9f61d6eca5979829449f67c54
- MD5 6f8617ca042ef0953c880867c410aecc
- SHA1 e46c6fac80bb4d7c1effa61239efaa1ae89876ce
- SHA512 83de83cef44ae5d0f01819ddcfa29addcef0d4e67eb73e7fd8a386c78706fee2865cf266c4a2cc4f6d6aa9d423373ee297e2218f08a512441c4d4e421c02751b
- SSDEEP 98304:pEKlanjsGnc0PfosXiSWhT9jPAcPruBbI0cJiddvO0gM/wDTBBPpqOFAoMEim:ytDnVwjcb0JbT4wDIOFAai
- TLSH T171676C9BF96A11D1C6ADC370DA6658237B723CAD172063C72764B9102F77BC86DBA310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Checks whether UAC is enabled