General
- Target 2026-07-11_aa025bcd4dfcdec6ce2b4026cf8d36c2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.4MB
- Sample260711-s1prrsfx2t
- SHA256 6c9da26b1682aa9b13f2f86c2283e0a243d4938de60764d84c50bc9c945e9a87
- MD5 aa025bcd4dfcdec6ce2b4026cf8d36c2
- SHA1 1bc2754613926d2e722af6a58c1d587fcb28d269
- SHA512 c9aaa77425e8ee96a3c810e917dd2e9def38b41e1029e47c9f73b266f55cddf9ccf30ededd17663a00bb40c33e062085e32db5f4c7f8936c06d6f65a00575b6a
- SSDEEP 98304:KQoJI24eiM3/06FCyEZyl0wNrMJQfkavgNoAJj60xXkCJCea5FX9aMY4RwAu:KDRJ3M6eZ8FHTIoQj6+OX9pw
- TLSH T1E3B67C53FC5665E9C1AD923189B2D6137B717C490B2223E3AF90F6382E76BD06D78384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-11_aa025bcd4dfcdec6ce2b4026cf8d36c2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_aa025bcd4dfcdec6ce2b4026cf8d36c2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_aa025bcd4dfcdec6ce2b4026cf8d36c2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.4MB
- SHA256 6c9da26b1682aa9b13f2f86c2283e0a243d4938de60764d84c50bc9c945e9a87
- MD5 aa025bcd4dfcdec6ce2b4026cf8d36c2
- SHA1 1bc2754613926d2e722af6a58c1d587fcb28d269
- SHA512 c9aaa77425e8ee96a3c810e917dd2e9def38b41e1029e47c9f73b266f55cddf9ccf30ededd17663a00bb40c33e062085e32db5f4c7f8936c06d6f65a00575b6a
- SSDEEP 98304:KQoJI24eiM3/06FCyEZyl0wNrMJQfkavgNoAJj60xXkCJCea5FX9aMY4RwAu:KDRJ3M6eZ8FHTIoQj6+OX9pw
- TLSH T1E3B67C53FC5665E9C1AD923189B2D6137B717C490B2223E3AF90F6382E76BD06D78384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.