General
- Target 2026-08-03_1ff82d9e86d54335ea926a7fd75b5660_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch
- Size 5.8MB
- Sample260804-drzhaavscz
- SHA256 d64170ba7e000e4863d3587c8c53552365f6bbbbf16483a8550f9b5bc7a9b1f0
- MD5 1ff82d9e86d54335ea926a7fd75b5660
- SHA1 68920c5fe1222d7fe28ef53905f63c42cf6e241c
- SHA512 be0ef76fcab1ac641f78ea290224f5e2ae43bd8b54819abe0e4287861a191fec6505913f95b9c39783195733a7527700a32871e293b1f5b51b5e51735be16985
- SSDEEP 98304:cPNhHWo7dNdtyR7UfavxCEm9LrlY3lBccEGE0gKQZ3Wv1EVmKEO:cLH97dGvxUpwO
- TLSH T12A565A41FECB55F6EA13093101A7B27F63389D058B25CBD7EB047A6AF8776911C3620A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_1ff82d9e86d54335ea926a7fd75b5660_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_1ff82d9e86d54335ea926a7fd75b5660_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_1ff82d9e86d54335ea926a7fd75b5660_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch
- Size 5.8MB
- SHA256 d64170ba7e000e4863d3587c8c53552365f6bbbbf16483a8550f9b5bc7a9b1f0
- MD5 1ff82d9e86d54335ea926a7fd75b5660
- SHA1 68920c5fe1222d7fe28ef53905f63c42cf6e241c
- SHA512 be0ef76fcab1ac641f78ea290224f5e2ae43bd8b54819abe0e4287861a191fec6505913f95b9c39783195733a7527700a32871e293b1f5b51b5e51735be16985
- SSDEEP 98304:cPNhHWo7dNdtyR7UfavxCEm9LrlY3lBccEGE0gKQZ3Wv1EVmKEO:cLH97dGvxUpwO
- TLSH T12A565A41FECB55F6EA13093101A7B27F63389D058B25CBD7EB047A6AF8776911C3620A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
Drops file in System32 directory