General
- Target 2026-07-18_bfd89303cea879a4af7d7dddd5260914_coinminer_dosia_poet-rat_quasar-rat_snatch
- Size 26.2MB
- Sample260718-mhntvsgt2p
- SHA256 31741e553eef15de03b78bb8cee4d2ceb3ed6345593fd817ff80f5311a2929d5
- MD5 bfd89303cea879a4af7d7dddd5260914
- SHA1 2157a506125506db1e6cc6b6bc29a1cc062a5fdd
- SHA512 ca549fb23a84f11c70f91f334f6866f5b8f84060155f62523399c1ab2fe921a9fabe5afdc5724f0b0e2aff75265bdca8043979d3a923f0631709adf20793285d
- SSDEEP 196608:6yxNWdgbhwI4m+JlW/lWiMlYs9gDzQLcgpX25kzHiT90LUboEBrtjg:6pgmI4m+rW/bzQxxxHiC6oEBrq
- TLSH T177573C77F8A11AD4D4EAD574D672812BBA713C190B7863D716A0B3202F3BBE09BB1741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_bfd89303cea879a4af7d7dddd5260914_coinminer_dosia_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_bfd89303cea879a4af7d7dddd5260914_coinminer_dosia_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_bfd89303cea879a4af7d7dddd5260914_coinminer_dosia_poet-rat_quasar-rat_snatch
- Size 26.2MB
- SHA256 31741e553eef15de03b78bb8cee4d2ceb3ed6345593fd817ff80f5311a2929d5
- MD5 bfd89303cea879a4af7d7dddd5260914
- SHA1 2157a506125506db1e6cc6b6bc29a1cc062a5fdd
- SHA512 ca549fb23a84f11c70f91f334f6866f5b8f84060155f62523399c1ab2fe921a9fabe5afdc5724f0b0e2aff75265bdca8043979d3a923f0631709adf20793285d
- SSDEEP 196608:6yxNWdgbhwI4m+JlW/lWiMlYs9gDzQLcgpX25kzHiT90LUboEBrtjg:6pgmI4m+rW/bzQxxxHiC6oEBrq
- TLSH T177573C77F8A11AD4D4EAD574D672812BBA713C190B7863D716A0B3202F3BBE09BB1741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.