General
- Target 2026-07-28_3c17281b210aad559ceb465313bf2f08_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_swisyn_wannacry
- Size 15.0MB
- Sample260728-25x4dabp2w
- SHA256 7df232a25b9876e2b688067045f7e0a3d44ae88ae8bddbdc160b28fa9e8556e2
- MD5 3c17281b210aad559ceb465313bf2f08
- SHA1 2ea78cd53c20bc9788fd763ec41882ac9c3d49e5
- SHA512 9682ed1c063e0ddce047bc73f22be04c41ddc2e4cffd06ea7a09c6a828964c773c36551021f323cb682c7aed7da23ed429ae17200e67f294ebede657caf893bf
- SSDEEP 196608:0zCcsiI2zVRfKHB87idy35koTBeFE/ogKbLsDnItQnT/:0WMjzVNKW0yjWbGx7
- TLSH T18BF68D43EC6115E9C9AED230C9B696637B757C484B322BC71B61B2246E73BD06EBD340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_3c17281b210aad559ceb465313bf2f08_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_3c17281b210aad559ceb465313bf2f08_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_swisyn_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_3c17281b210aad559ceb465313bf2f08_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_swisyn_wannacry
- Size 15.0MB
- SHA256 7df232a25b9876e2b688067045f7e0a3d44ae88ae8bddbdc160b28fa9e8556e2
- MD5 3c17281b210aad559ceb465313bf2f08
- SHA1 2ea78cd53c20bc9788fd763ec41882ac9c3d49e5
- SHA512 9682ed1c063e0ddce047bc73f22be04c41ddc2e4cffd06ea7a09c6a828964c773c36551021f323cb682c7aed7da23ed429ae17200e67f294ebede657caf893bf
- SSDEEP 196608:0zCcsiI2zVRfKHB87idy35koTBeFE/ogKbLsDnItQnT/:0WMjzVNKW0yjWbGx7
- TLSH T18BF68D43EC6115E9C9AED230C9B696637B757C484B322BC71B61B2246E73BD06EBD340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory