General
- Target 2026-07-30_80f133094660b5ce136e9c0798d95f0e_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar_zxxz
- Size 65.5MB
- Sample260730-2bbnaaybrc
- SHA256 a0bcb278c92685bcd280f55db1aa79630ad23c7446715d7634ce6f4a0d42cdbc
- MD5 80f133094660b5ce136e9c0798d95f0e
- SHA1 f6c54a5ef12c1428e86bb3b2f25aef75453b7a70
- SHA512 3e1a3cce8345c4d44d90daecba3e3bf977c13d3fa4bb3b1c1bf3949d50ee107d23301335339617fe90715579ad92bb12095c332bfe45046ea9430206974ff156
- SSDEEP 196608:4m1X0JHRw1GZC1VdHjTbXT7yE8siaLNJBpT0CpJrDGKN3/7PHbHQiFEy+dlGxf8k:46X0gdHdHj3X8si00CHBdvbPFEOx
- TLSH T11BE75B47F96670E0C4EE8935C6A66513BBB13C8947312BC71A50F6246F77BD0AABE310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_80f133094660b5ce136e9c0798d95f0e_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar_zxxz.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_80f133094660b5ce136e9c0798d95f0e_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar_zxxz.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_80f133094660b5ce136e9c0798d95f0e_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar_zxxz
- Size 65.5MB
- SHA256 a0bcb278c92685bcd280f55db1aa79630ad23c7446715d7634ce6f4a0d42cdbc
- MD5 80f133094660b5ce136e9c0798d95f0e
- SHA1 f6c54a5ef12c1428e86bb3b2f25aef75453b7a70
- SHA512 3e1a3cce8345c4d44d90daecba3e3bf977c13d3fa4bb3b1c1bf3949d50ee107d23301335339617fe90715579ad92bb12095c332bfe45046ea9430206974ff156
- SSDEEP 196608:4m1X0JHRw1GZC1VdHjTbXT7yE8siaLNJBpT0CpJrDGKN3/7PHbHQiFEy+dlGxf8k:46X0gdHdHj3X8si00CHBdvbPFEOx
- TLSH T11BE75B47F96670E0C4EE8935C6A66513BBB13C8947312BC71A50F6246F77BD0AABE310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables containing bas64 encoded gzip files
-
UPX dump on OEP (original entry point)