General
- Target 2026-08-01_e4506fa9f5b0bc94783954696571892d_coinminer_dosia_eternalromance_glassworm_ngrbot_poet-rat_quasar-rat_snatch_zxxz
- Size 34.5MB
- Sample260801-3jmaesae24
- SHA256 8556389860cba368b84a794bf1d6941b965b798c3586ebd88773e7bbf9bb10d0
- MD5 e4506fa9f5b0bc94783954696571892d
- SHA1 57a48094cfdd2b283396f98017e64d3400386f22
- SHA512 5e2ef4d912066280543cbb8524eb008594de359ab54588a9b93137384ad2c80d1db1297898553b4899254a050dc65ea0611ac2a39d727f72b758bf6c0438f165
- SSDEEP 98304:9q06WM/5UDXfQJ6R9SG19eyD7nVdWxeNG/R5inA+oT3dZ7x9A/WQj5E5/B9fsGEs:0fhUTQ0motNGZ+A+oT3dZrQWQjGHfI
- TLSH T10E875963F9A134A1C69CC133C666A6537FB27886472423C7BB9CB7246FB6BC0557A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_e4506fa9f5b0bc94783954696571892d_coinminer_dosia_eternalromance_glassworm_ngrbot_poet-rat_quasar-rat_snatch_zxxz.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_e4506fa9f5b0bc94783954696571892d_coinminer_dosia_eternalromance_glassworm_ngrbot_poet-rat_quasar-rat_snatch_zxxz.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_e4506fa9f5b0bc94783954696571892d_coinminer_dosia_eternalromance_glassworm_ngrbot_poet-rat_quasar-rat_snatch_zxxz
- Size 34.5MB
- SHA256 8556389860cba368b84a794bf1d6941b965b798c3586ebd88773e7bbf9bb10d0
- MD5 e4506fa9f5b0bc94783954696571892d
- SHA1 57a48094cfdd2b283396f98017e64d3400386f22
- SHA512 5e2ef4d912066280543cbb8524eb008594de359ab54588a9b93137384ad2c80d1db1297898553b4899254a050dc65ea0611ac2a39d727f72b758bf6c0438f165
- SSDEEP 98304:9q06WM/5UDXfQJ6R9SG19eyD7nVdWxeNG/R5inA+oT3dZ7x9A/WQj5E5/B9fsGEs:0fhUTQ0motNGZ+A+oT3dZrQWQjGHfI
- TLSH T10E875963F9A134A1C69CC133C666A6537FB27886472423C7BB9CB7246FB6BC0557A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables referencing many IR and analysis tools
-
UPX dump on OEP (original entry point)