General
- Target 2026-07-30_5df808d140dd1329241ec92c656a8024_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.2MB
- Sample260730-gaqqlacd84
- SHA256 ca687ea811ec444ed1495a49427daed9654498e6e32be0cf42e006c8d2c1074e
- MD5 5df808d140dd1329241ec92c656a8024
- SHA1 af327cb3eff2e9e3b0d20319333416747b3b709d
- SHA512 c22abd7e783f017103c88b970bc266e636de8e85b7c18bd80a78ee0e73b2ba116a8a6a5337e0e7c4412d4021889ec9083eaefd8a5a8d996827cc2d6e3fed1430
- SSDEEP 98304:elnaAw4hkNLs6k/6uVOEq6IDRAF8WsTH9vP1+Oi9xMTikRoLDY:eMjK6kTxkDqETdMOs2WkRo3Y
- TLSH T187B67C43FC5559D9C1AE9230C9B392527B31BC490B3263D72BA0B2387E76BD06E7A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_5df808d140dd1329241ec92c656a8024_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_5df808d140dd1329241ec92c656a8024_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_5df808d140dd1329241ec92c656a8024_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.2MB
- SHA256 ca687ea811ec444ed1495a49427daed9654498e6e32be0cf42e006c8d2c1074e
- MD5 5df808d140dd1329241ec92c656a8024
- SHA1 af327cb3eff2e9e3b0d20319333416747b3b709d
- SHA512 c22abd7e783f017103c88b970bc266e636de8e85b7c18bd80a78ee0e73b2ba116a8a6a5337e0e7c4412d4021889ec9083eaefd8a5a8d996827cc2d6e3fed1430
- SSDEEP 98304:elnaAw4hkNLs6k/6uVOEq6IDRAF8WsTH9vP1+Oi9xMTikRoLDY:eMjK6kTxkDqETdMOs2WkRo3Y
- TLSH T187B67C43FC5559D9C1AE9230C9B392527B31BC490B3263D72BA0B2387E76BD06E7A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.