General
- Target 2026-08-03_08ed0379ff67239596c8a13186dcf59a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 8.4MB
- Sample260803-dhkyjabl5w
- SHA256 0d7c6662da55a84402a601143313e6bf52bb335076949127b7bc006603a8dc5a
- MD5 08ed0379ff67239596c8a13186dcf59a
- SHA1 7d61402d914059224dd29d70cf0509f785ff3acd
- SHA512 44005077e261d0853fba5db4eaf61634bf3d2848a3ea4d037c02b4a386af4ceb32b17cfb41c4a166982838361225dd4bbf5c59a98755de08c1b32c6a3b1e2b4b
- SSDEEP 49152:4vKVJyinNh1vfB2+QVov+dPEpXjHpLXl5Y7gR/iZF/AWfTffUuivpzzCQG9bVxDn:4vwU+3YExXiZdJNaitNOzb8CESLS
- TLSH T141965A47EDA515E9C1ADC2318B7396237B717C891B2127E31B60F6282F36BD06D79388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-03_08ed0379ff67239596c8a13186dcf59a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_08ed0379ff67239596c8a13186dcf59a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_08ed0379ff67239596c8a13186dcf59a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 8.4MB
- SHA256 0d7c6662da55a84402a601143313e6bf52bb335076949127b7bc006603a8dc5a
- MD5 08ed0379ff67239596c8a13186dcf59a
- SHA1 7d61402d914059224dd29d70cf0509f785ff3acd
- SHA512 44005077e261d0853fba5db4eaf61634bf3d2848a3ea4d037c02b4a386af4ceb32b17cfb41c4a166982838361225dd4bbf5c59a98755de08c1b32c6a3b1e2b4b
- SSDEEP 49152:4vKVJyinNh1vfB2+QVov+dPEpXjHpLXl5Y7gR/iZF/AWfTffUuivpzzCQG9bVxDn:4vwU+3YExXiZdJNaitNOzb8CESLS
- TLSH T141965A47EDA515E9C1ADC2318B7396237B717C891B2127E31B60F6282F36BD06D79388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.