General
- Target 2026-07-20_fe3c829e60361424cc82cc6c41ffb805_coinminer_dosia_elex_glassworm_ngrbot_poet-rat_quasar-rat_sliver_snatch
- Size 9.6MB
- Sample260720-j8w2dadz3s
- SHA256 2e5e2c46c8faec920bd964bb720ac97af3ad01d2776d81d9094c8371aba19c81
- MD5 fe3c829e60361424cc82cc6c41ffb805
- SHA1 9e715d65fd709f4690ebc92b7d6a5508b180e214
- SHA512 b1a53532b15612bbc2822d6b12a3c55346711424e31fb0a65ea99531959db8340cdff5056186b974e0fce3f2b36e189645b4d8b965c0207db50da587aa8c1e71
- SSDEEP 98304:h4Rk1wxRXNQ1dLylzN7chVRvbvoigE3hhVVreP7lS/EsPx:hpwJQegcigihlusPx
- TLSH T1CCA61701FAC751F5E903183105A7B27F27341E058B28DBDBEB84BE5AF9376A22C32655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-07-20_fe3c829e60361424cc82cc6c41ffb805_coinminer_dosia_elex_glassworm_ngrbot_poet-rat_quasar-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_fe3c829e60361424cc82cc6c41ffb805_coinminer_dosia_elex_glassworm_ngrbot_poet-rat_quasar-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_fe3c829e60361424cc82cc6c41ffb805_coinminer_dosia_elex_glassworm_ngrbot_poet-rat_quasar-rat_sliver_snatch
- Size 9.6MB
- SHA256 2e5e2c46c8faec920bd964bb720ac97af3ad01d2776d81d9094c8371aba19c81
- MD5 fe3c829e60361424cc82cc6c41ffb805
- SHA1 9e715d65fd709f4690ebc92b7d6a5508b180e214
- SHA512 b1a53532b15612bbc2822d6b12a3c55346711424e31fb0a65ea99531959db8340cdff5056186b974e0fce3f2b36e189645b4d8b965c0207db50da587aa8c1e71
- SSDEEP 98304:h4Rk1wxRXNQ1dLylzN7chVRvbvoigE3hhVVreP7lS/EsPx:hpwJQegcigihlusPx
- TLSH T1CCA61701FAC751F5E903183105A7B27F27341E058B28DBDBEB84BE5AF9376A22C32655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.