General
- Target 2026-07-08_b6d29e2812b34be8d03e9f5fe7493ebc_coinminer_dosia_elex_glassworm_hive_quasar-rat_snatch
- Size 3.4MB
- Sample260708-cryejshv7z
- SHA256 890222d7dda6e82037217526b15fe0707d17f3d9bd58b0c0a19830730940188f
- MD5 b6d29e2812b34be8d03e9f5fe7493ebc
- SHA1 4298d1e6d493183b6d101bc74a388df6a93df76b
- SHA512 5a5425d03e0cc1cc7c96abe9a9cf979100873d20c9624989d36e6482c18524a99a2c0d94d409ed86415264033d4922e74b77e360384848dab3559ff1830bbca5
- SSDEEP 49152:BLIrssG8I0syD4tJD5B2s4k63U3H2OqQBcMvbl2N45E7r:g4P3HNHDXE
- TLSH T1A7F55B41B8021EA6D6653632C8B946F03370AC499F62CB4F351CF37EBC735996A87789
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-08_b6d29e2812b34be8d03e9f5fe7493ebc_coinminer_dosia_elex_glassworm_hive_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_b6d29e2812b34be8d03e9f5fe7493ebc_coinminer_dosia_elex_glassworm_hive_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_b6d29e2812b34be8d03e9f5fe7493ebc_coinminer_dosia_elex_glassworm_hive_quasar-rat_snatch
- Size 3.4MB
- SHA256 890222d7dda6e82037217526b15fe0707d17f3d9bd58b0c0a19830730940188f
- MD5 b6d29e2812b34be8d03e9f5fe7493ebc
- SHA1 4298d1e6d493183b6d101bc74a388df6a93df76b
- SHA512 5a5425d03e0cc1cc7c96abe9a9cf979100873d20c9624989d36e6482c18524a99a2c0d94d409ed86415264033d4922e74b77e360384848dab3559ff1830bbca5
- SSDEEP 49152:BLIrssG8I0syD4tJD5B2s4k63U3H2OqQBcMvbl2N45E7r:g4P3HNHDXE
- TLSH T1A7F55B41B8021EA6D6653632C8B946F03370AC499F62CB4F351CF37EBC735996A87789
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.