2026-07-20_6d0981f767d33e0cf4efe1fa3138a202_coinminer_dosia_poet-rat_quasar-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_6d0981f767d33e0cf4efe1fa3138a202_coinminer_dosia_poet-rat_quasar-rat_snatch
Size 14.2MB
Sample260720-lnvc6adv3k
SHA256 f60e02bd3a81692f6c3718242d498568a10d1c9f16825fc93f60212050675fb3
MD5 6d0981f767d33e0cf4efe1fa3138a202
SHA1 6999cfac847f09628456ac5365a0b5adce80b02c
SHA512 8ab9fae5038ea781ecbf564e8eea1b3048abfd904bd03f8903f0a4e3e0554f31e55cbf7fc2947a4b0933fc1debfdf4aaa833725fe6082e436b6a3c1bfd2c5dfc
SSDEEP 98304:++tOTobq+mB3ES71vK71ZX4EqS2nKhaE4bjXf/Eij:+gBq+mB3ES7tK7/o34L
TLSH
T1D6E63C63E8E215D4C5EAC270CA72416BBA613C192B3823E71690F7601F37BD4DEB6791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_6d0981f767d33e0cf4efe1fa3138a202_coinminer_dosia_poet-rat_quasar-rat_snatch

File Explorer

2026-07-20_6d0981f767d33e0cf4efe1fa3138a202_coinminer_dosia_poet-rat_quasar-rat_snatch

.exe 14.2MB

2026-07-20_6d0981f767d33e0cf4efe1fa3138a202_coinminer_dosia_poet-rat_quasar-rat_snatch

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 f60e02bd3a81692f6c3718242d498568a10d1c9f16825fc93f60212050675fb3
MD5 6d0981f767d33e0cf4efe1fa3138a202
SHA1 6999cfac847f09628456ac5365a0b5adce80b02c
SHA512 8ab9fae5038ea781ecbf564e8eea1b3048abfd904bd03f8903f0a4e3e0554f31e55cbf7fc2947a4b0933fc1debfdf4aaa833725fe6082e436b6a3c1bfd2c5dfc
SSDEEP 98304:++tOTobq+mB3ES71vK71ZX4EqS2nKhaE4bjXf/Eij:+gBq+mB3ES7tK7/o34L
TLSH
T1D6E63C63E8E215D4C5EAC270CA72416BBA613C192B3823E71690F7601F37BD4DEB6791
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

495424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

8.6MB

Virtual Size

8.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.9MB

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

441KB

Virtual Size

32.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

151KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

125KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-07-20_6d0981f767d33e0cf4efe1fa3138a202_coinminer_dosia_poet-rat_quasar-rat_snatch

kernel32

generic