General
- Target 2026-07-31_dd1b0acc6d59bfc7d5ecac6a8934430a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.3MB
- Sample260731-2453laab75
- SHA256 610bfd177ffea605af35159e68e204209f9264bc8a1e1ab7e760a5bcf814fd54
- MD5 dd1b0acc6d59bfc7d5ecac6a8934430a
- SHA1 140c499eb9b0b0208909f60d265d72fb26cb6211
- SHA512 4373f91a2fcd1f3c6470c8960850449673ffe638f490b453e140e8136b8a8aaaa08d323b21b8a64ec8c7a0e4ed3bfc03b5a23cd095af9caf0ce24d27e7fc59f3
- SSDEEP 98304:cXeW+vuOrCxhaUt/opazj0B+YW5h3IDIVElY3:cR6nrSJfMDmSlY
- TLSH T1BAC64947E8A541E9C0AEC176CA369517BB713C894B3063D32B90FB246F36BD0AE79741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_dd1b0acc6d59bfc7d5ecac6a8934430a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_dd1b0acc6d59bfc7d5ecac6a8934430a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_dd1b0acc6d59bfc7d5ecac6a8934430a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.3MB
- SHA256 610bfd177ffea605af35159e68e204209f9264bc8a1e1ab7e760a5bcf814fd54
- MD5 dd1b0acc6d59bfc7d5ecac6a8934430a
- SHA1 140c499eb9b0b0208909f60d265d72fb26cb6211
- SHA512 4373f91a2fcd1f3c6470c8960850449673ffe638f490b453e140e8136b8a8aaaa08d323b21b8a64ec8c7a0e4ed3bfc03b5a23cd095af9caf0ce24d27e7fc59f3
- SSDEEP 98304:cXeW+vuOrCxhaUt/opazj0B+YW5h3IDIVElY3:cR6nrSJfMDmSlY
- TLSH T1BAC64947E8A541E9C0AEC176CA369517BB713C894B3063D32B90FB246F36BD0AE79741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.