General
- Target 2026-07-06_4c2e11f86655d73d3b4ad6236aa07e50_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch
- Size 12.3MB
- Sample260707-eh157aev5m
- SHA256 f087a8ff52e32494c7f853c77d327cb50fc10ee87875109cf76e5a48580c6917
- MD5 4c2e11f86655d73d3b4ad6236aa07e50
- SHA1 a5027ee7133237483a76c4a228abe8549bc6518a
- SHA512 9fd2e8b7dd591d63b06a31318e49bda5b3eedbbecdf1a4c8e141022c6ace6764b74338253d65b83e52352433953771412277233e2508ef0f6f3e84a5612b4e36
- SSDEEP 49152:Rf30Qw8PUtdEwsPMizWdPzMLQewmDwZRlZt1+ZAkH+dLx9gvIUJV2LV1uteVe6g/:1EQVcKzW5AkezMZ3OmAHLtZP4CmE
- TLSH T19FD65B51FDCB94F9EE035832516BB23F2331AD088B24DB97EB047A6AF8776951C66304
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-06_4c2e11f86655d73d3b4ad6236aa07e50_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_4c2e11f86655d73d3b4ad6236aa07e50_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_4c2e11f86655d73d3b4ad6236aa07e50_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch
- Size 12.3MB
- SHA256 f087a8ff52e32494c7f853c77d327cb50fc10ee87875109cf76e5a48580c6917
- MD5 4c2e11f86655d73d3b4ad6236aa07e50
- SHA1 a5027ee7133237483a76c4a228abe8549bc6518a
- SHA512 9fd2e8b7dd591d63b06a31318e49bda5b3eedbbecdf1a4c8e141022c6ace6764b74338253d65b83e52352433953771412277233e2508ef0f6f3e84a5612b4e36
- SSDEEP 49152:Rf30Qw8PUtdEwsPMizWdPzMLQewmDwZRlZt1+ZAkH+dLx9gvIUJV2LV1uteVe6g/:1EQVcKzW5AkezMZ3OmAHLtZP4CmE
- TLSH T19FD65B51FDCB94F9EE035832516BB23F2331AD088B24DB97EB047A6AF8776951C66304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.