General
- Target 2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.5MB
- Sample260723-gp4wrsha32
- SHA256 ae130e7e8b7fc3a294a0944c633b018e19ba7159dd991184de5e1a2169885333
- MD5 3741a0564052d6a5895146a0a96c5d67
- SHA1 58defa3777325d71c3ecaebde8adf4e895cdb1dd
- SHA512 0351fd3717fe6b858ff53edf4ded02ef65a6e06d5a66199a6b9838995262d9408da85d42e34079b7fe3bb932cbf1fa3c02b74725a2928840f46e5fa25d41f7d9
- SSDEEP 98304:1KoCPh1hLDJLQXaEon9lAdm/1svGYVvi+WIhpJEvjPjmu7X:121JOonfAd3BVK+fHqjjmu
- TLSH T1DCB67C47ECA515E9C1AD923089B396137B727C894B3263D32B60B2387E777E06E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.5MB
- SHA256 ae130e7e8b7fc3a294a0944c633b018e19ba7159dd991184de5e1a2169885333
- MD5 3741a0564052d6a5895146a0a96c5d67
- SHA1 58defa3777325d71c3ecaebde8adf4e895cdb1dd
- SHA512 0351fd3717fe6b858ff53edf4ded02ef65a6e06d5a66199a6b9838995262d9408da85d42e34079b7fe3bb932cbf1fa3c02b74725a2928840f46e5fa25d41f7d9
- SSDEEP 98304:1KoCPh1hLDJLQXaEon9lAdm/1svGYVvi+WIhpJEvjPjmu7X:121JOonfAd3BVK+fHqjjmu
- TLSH T1DCB67C47ECA515E9C1AD923089B396137B727C894B3263D32B60B2387E777E06E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.