General
- Target 2026-07-08_2ff2fd0abcc7a2e09ca50b3718ef6c09_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.1MB
- Sample260708-sm64wsas4n
- SHA256 daf16385e9033181d2f45412af5aa9081cc2f66e63f5bd167bf4bbbf87583de4
- MD5 2ff2fd0abcc7a2e09ca50b3718ef6c09
- SHA1 48d37fb0a20a6b48563d6db3989280cc571d3500
- SHA512 9f3d99500b47f6403fe1845695456fcd14da4d9a06e669044ed4a8b5d834081468cf0132504b22761dce3ed2de24125acfe4b3f3c8878994c6981aff9172f32a
- SSDEEP 98304:d+Xut4X03OCElKsNvkx6VdTzHXaL7DsnYFE3E:dgqYOURHVAd
- TLSH T1EEC63947E8A555E8C1EEC175C6369613BB613C894F2063D36B90F6282F37BD0AEB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-08_2ff2fd0abcc7a2e09ca50b3718ef6c09_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_2ff2fd0abcc7a2e09ca50b3718ef6c09_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_2ff2fd0abcc7a2e09ca50b3718ef6c09_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.1MB
- SHA256 daf16385e9033181d2f45412af5aa9081cc2f66e63f5bd167bf4bbbf87583de4
- MD5 2ff2fd0abcc7a2e09ca50b3718ef6c09
- SHA1 48d37fb0a20a6b48563d6db3989280cc571d3500
- SHA512 9f3d99500b47f6403fe1845695456fcd14da4d9a06e669044ed4a8b5d834081468cf0132504b22761dce3ed2de24125acfe4b3f3c8878994c6981aff9172f32a
- SSDEEP 98304:d+Xut4X03OCElKsNvkx6VdTzHXaL7DsnYFE3E:dgqYOURHVAd
- TLSH T1EEC63947E8A555E8C1EEC175C6369613BB613C894F2063D36B90F6282F37BD0AEB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.