General
- Target 2026-07-14_ce88be9c2b5018169f04141ce7f79b87_coinminer_dosia_poet-rat_quasar-rat_snatch
- Size 14.7MB
- Sample260714-ka5rasbx5t
- SHA256 c64018d4e1bf6f19dffae66139144c1027f3dbb5f50a94a58afca586c687476e
- MD5 ce88be9c2b5018169f04141ce7f79b87
- SHA1 aaf99499a816ee24f5edf57a049e291b3bc25d6e
- SHA512 d465a965f7d6225ac80c4a110786ca1e47e49f532b912d52ec0185ac51cf0b2570e39e68712c45d5ed2401eb285ded2aad095ae928a1d9e5abbc1d350bcd8588
- SSDEEP 98304:4/wHjptrpRKEw64/Dca0S9fAddq3hbrwF4/hVJr0wMLEKIx:44FtFRFw64/90Go36Br0w3
- TLSH T1BAF62963E8921AD5C4EE8570C672813BBA753C091B7823E75690B3341F36BE0DEB6752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_ce88be9c2b5018169f04141ce7f79b87_coinminer_dosia_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_ce88be9c2b5018169f04141ce7f79b87_coinminer_dosia_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_ce88be9c2b5018169f04141ce7f79b87_coinminer_dosia_poet-rat_quasar-rat_snatch
- Size 14.7MB
- SHA256 c64018d4e1bf6f19dffae66139144c1027f3dbb5f50a94a58afca586c687476e
- MD5 ce88be9c2b5018169f04141ce7f79b87
- SHA1 aaf99499a816ee24f5edf57a049e291b3bc25d6e
- SHA512 d465a965f7d6225ac80c4a110786ca1e47e49f532b912d52ec0185ac51cf0b2570e39e68712c45d5ed2401eb285ded2aad095ae928a1d9e5abbc1d350bcd8588
- SSDEEP 98304:4/wHjptrpRKEw64/Dca0S9fAddq3hbrwF4/hVJr0wMLEKIx:44FtFRFw64/90Go36Br0w3
- TLSH T1BAF62963E8921AD5C4EE8570C672813BBA753C091B7823E75690B3341F36BE0DEB6752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Looks for Xen service registry key.