General
- Target 2026-07-06_d1443be4985f30bf392cf954edcce3de_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.1MB
- Sample260707-a5dk7aex4z
- SHA256 550fa3ac9d859004ac9eb5a3519d2aadc9df2d35a6a63444378b80cd19ca4585
- MD5 d1443be4985f30bf392cf954edcce3de
- SHA1 91055822d8abe47a357bf190dcb08dc03bc1d379
- SHA512 24d00c4076dd39cc5ef7df7e657a342439971d5c4539ea988e404e965ee3de75d10d7cd31e75a7802ce135a2a9be5872ead8c435ace40eb09db696abe5d35241
- SSDEEP 49152:SRYtTsKGIqB0XNHrB5CyWiJ5CwdrdRLwjgXO7os0Yh4ElAbUF9G/nYV5TAORvlj6:SGyE+QZLzs0cGb89GfftwqVc2773hiE
- TLSH T15AC63947E9A555E5C0AEC1758A369552BB703C895B3023D36BA0F7342F37BE0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-06_d1443be4985f30bf392cf954edcce3de_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_d1443be4985f30bf392cf954edcce3de_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_d1443be4985f30bf392cf954edcce3de_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.1MB
- SHA256 550fa3ac9d859004ac9eb5a3519d2aadc9df2d35a6a63444378b80cd19ca4585
- MD5 d1443be4985f30bf392cf954edcce3de
- SHA1 91055822d8abe47a357bf190dcb08dc03bc1d379
- SHA512 24d00c4076dd39cc5ef7df7e657a342439971d5c4539ea988e404e965ee3de75d10d7cd31e75a7802ce135a2a9be5872ead8c435ace40eb09db696abe5d35241
- SSDEEP 49152:SRYtTsKGIqB0XNHrB5CyWiJ5CwdrdRLwjgXO7os0Yh4ElAbUF9G/nYV5TAORvlj6:SGyE+QZLzs0cGb89GfftwqVc2773hiE
- TLSH T15AC63947E9A555E5C0AEC1758A369552BB703C895B3023D36BA0F7342F37BE0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.