General
- Target 2026-07-23_d4fbb6936f2a2461408f851696c19cd4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.9MB
- Sample260723-gfgpwagg78
- SHA256 2c45bc052c13c27ad6c2adcde26435faf0c506fa26791ae3c53d12bacc076611
- MD5 d4fbb6936f2a2461408f851696c19cd4
- SHA1 7bbf18ea297a9e9e596dd2b4267903f73b9f6514
- SHA512 caa9ce37322956014a193058f415d69528ef491a34ebeacdb2682b017ed1fdb12fcf9902b92e97d047c8207a871936866ed245a2fd3743e9d0623724e81c69cd
- SSDEEP 98304:WYTKa3g973UtFSK1ZXz4IOr+Ewbt6Vc39YoHDKKXBpplYbSVXFZoW3:WN0ghgXzFUmIcNYoHmKxppljdFr3
- TLSH T151B67B43F99554E9C1ADA232C9B682137B71BC490B3223D71B90B6387F76BD06EB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_d4fbb6936f2a2461408f851696c19cd4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_d4fbb6936f2a2461408f851696c19cd4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_d4fbb6936f2a2461408f851696c19cd4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.9MB
- SHA256 2c45bc052c13c27ad6c2adcde26435faf0c506fa26791ae3c53d12bacc076611
- MD5 d4fbb6936f2a2461408f851696c19cd4
- SHA1 7bbf18ea297a9e9e596dd2b4267903f73b9f6514
- SHA512 caa9ce37322956014a193058f415d69528ef491a34ebeacdb2682b017ed1fdb12fcf9902b92e97d047c8207a871936866ed245a2fd3743e9d0623724e81c69cd
- SSDEEP 98304:WYTKa3g973UtFSK1ZXz4IOr+Ewbt6Vc39YoHDKKXBpplYbSVXFZoW3:WN0ghgXzFUmIcNYoHmKxppljdFr3
- TLSH T151B67B43F99554E9C1ADA232C9B682137B71BC490B3223D71B90B6387F76BD06EB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.