General
- Target 2026-07-23_70fc2c3f127c8336b9127c68219851a0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 16.6MB
- Sample260723-gmk1wagh77
- SHA256 fad15129e0a2a37b23d6af2a4cc9fece679fbf009dede006f6dd06a95912e147
- MD5 70fc2c3f127c8336b9127c68219851a0
- SHA1 6b80fc0c6105ed16c250c12da1c8b41009e03163
- SHA512 a04217048688705f7d54d3572d4d1395a8d024c0d375bbd1f9d479e871618925ea271ab52befa1b092b05769ce32411ad6163f3fcc401d26501436479e3c3c02
- SSDEEP 196608:2ose66vfuqq8SNq2Co3UVnIwBag03p5RmrxX7lXnlFNfkv6:2R6XFQNqbo3in50Z5uxr3
- TLSH T121078C43E87506E9C0AD9676C6778653BB743C884B7163D36BA0B6342F36BD0AE79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_70fc2c3f127c8336b9127c68219851a0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_70fc2c3f127c8336b9127c68219851a0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_70fc2c3f127c8336b9127c68219851a0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 16.6MB
- SHA256 fad15129e0a2a37b23d6af2a4cc9fece679fbf009dede006f6dd06a95912e147
- MD5 70fc2c3f127c8336b9127c68219851a0
- SHA1 6b80fc0c6105ed16c250c12da1c8b41009e03163
- SHA512 a04217048688705f7d54d3572d4d1395a8d024c0d375bbd1f9d479e871618925ea271ab52befa1b092b05769ce32411ad6163f3fcc401d26501436479e3c3c02
- SSDEEP 196608:2ose66vfuqq8SNq2Co3UVnIwBag03p5RmrxX7lXnlFNfkv6:2R6XFQNqbo3in50Z5uxr3
- TLSH T121078C43E87506E9C0AD9676C6778653BB743C884B7163D36BA0B6342F36BD0AE79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.