General
- Target 2026-07-06_fb8d93b12a09dc763eacdd88d5c52b34_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 16.5MB
- Sample260706-3rtpgadv5y
- SHA256 20585d6223a398aa37b2d7da79496b44572ed30a7d5b9065bd140f2e57d490cd
- MD5 fb8d93b12a09dc763eacdd88d5c52b34
- SHA1 331dbe3ec7e94d2035b4e1ea1f46549593d67d2c
- SHA512 395b5b2ec535c63e479603a7d3a5628be91ce99ff71056358d31c0d1f0e1965d3d20f12f2ad1b006780eaeb46b5c58ec8e4d46e388c0698a0095d3786d887c7e
- SSDEEP 196608:s+Lc0kMxG8OWolWDDzUwEM2RHgvGkBwt3Se:sH0k/WolWbOMNvGkBwNS
- TLSH T15D077C47E89909E9C49DD230C5B6D2237B717C484B3227C72B60B6786F76BD0AEB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-06_fb8d93b12a09dc763eacdd88d5c52b34_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_fb8d93b12a09dc763eacdd88d5c52b34_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
overlord
Attributes
-
pastebin_config
https://pastebin.com/raw/8QB1WnTA
Targets
-
- Target 2026-07-06_fb8d93b12a09dc763eacdd88d5c52b34_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 16.5MB
- SHA256 20585d6223a398aa37b2d7da79496b44572ed30a7d5b9065bd140f2e57d490cd
- MD5 fb8d93b12a09dc763eacdd88d5c52b34
- SHA1 331dbe3ec7e94d2035b4e1ea1f46549593d67d2c
- SHA512 395b5b2ec535c63e479603a7d3a5628be91ce99ff71056358d31c0d1f0e1965d3d20f12f2ad1b006780eaeb46b5c58ec8e4d46e388c0698a0095d3786d887c7e
- SSDEEP 196608:s+Lc0kMxG8OWolWDDzUwEM2RHgvGkBwt3Se:sH0k/WolWbOMNvGkBwNS
- TLSH T15D077C47E89909E9C49DD230C5B6D2237B717C484B3227C72B60B6786F76BD0AEB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.