General
- Target 2026-07-12_92243604f7b1bc0b36cca307a7f186ed_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.7MB
- Sample260712-3y6mlsb12v
- SHA256 48922f1f6ed7052eb471a9412e426a673e2f9969b643892124b7ffc7467323fe
- MD5 92243604f7b1bc0b36cca307a7f186ed
- SHA1 c98c5da5d1f1e23065ed9399ea40a4bcd19b043f
- SHA512 fde2b794d8974c302d5e4acf3df2d0065ddc39e9fbf7efaf506d1888882ac31e6cbdd35be6be7507c995919807de15e88a7f396b9031ef0bceab4cf9148e0cb2
- SSDEEP 98304:1UbSpRAeOhDOv6UPOSTXf67ND3NHHy9tbz3WpbbyfAkHSsL1JBPrmMIke6kwxiRd:1VbAfmOSTXf67ND3lA3s/
- TLSH T184C63817FDA906E5C0ADC630857AA2137B713C494B2173D72F50B628AF76BE0ADB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_92243604f7b1bc0b36cca307a7f186ed_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_92243604f7b1bc0b36cca307a7f186ed_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
overlord
C2
-
74.208.16.124:5173/
Targets
-
- Target 2026-07-12_92243604f7b1bc0b36cca307a7f186ed_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.7MB
- SHA256 48922f1f6ed7052eb471a9412e426a673e2f9969b643892124b7ffc7467323fe
- MD5 92243604f7b1bc0b36cca307a7f186ed
- SHA1 c98c5da5d1f1e23065ed9399ea40a4bcd19b043f
- SHA512 fde2b794d8974c302d5e4acf3df2d0065ddc39e9fbf7efaf506d1888882ac31e6cbdd35be6be7507c995919807de15e88a7f396b9031ef0bceab4cf9148e0cb2
- SSDEEP 98304:1UbSpRAeOhDOv6UPOSTXf67ND3NHHy9tbz3WpbbyfAkHSsL1JBPrmMIke6kwxiRd:1VbAfmOSTXf67ND3lA3s/
- TLSH T184C63817FDA906E5C0ADC630857AA2137B713C494B2173D72F50B628AF76BE0ADB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.