General
- Target 2026-08-07_a8b403ee7aca98378b1d64bacd1e676b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.2MB
- Sample260807-hkn57ahl6w
- SHA256 e24256154077770e3a4727597cf6d6bd2468aa535b5bf928d9aff4c39162420d
- MD5 a8b403ee7aca98378b1d64bacd1e676b
- SHA1 01dda59a6bb0c66c7bde09c472dd8c8aace5e650
- SHA512 e49d6d01bec9c67ac4d2e9a575d385db0d86a7f37b70b1fe71cb9219e4121911287ef650a519b766400ee1a94f68af647185801e8bfe987da4092a2a9c9a7cc4
- SSDEEP 98304:afNmVLCqwtoQfYu/eWosPuPpifc8E1AQcI9FACE:a8VloU8EaQkP
- TLSH T106C64A47E8A515E5C0AEC135C6269966BB713C894B3073D76BA0FA382F73BD06DB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-08-07_a8b403ee7aca98378b1d64bacd1e676b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_a8b403ee7aca98378b1d64bacd1e676b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_a8b403ee7aca98378b1d64bacd1e676b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.2MB
- SHA256 e24256154077770e3a4727597cf6d6bd2468aa535b5bf928d9aff4c39162420d
- MD5 a8b403ee7aca98378b1d64bacd1e676b
- SHA1 01dda59a6bb0c66c7bde09c472dd8c8aace5e650
- SHA512 e49d6d01bec9c67ac4d2e9a575d385db0d86a7f37b70b1fe71cb9219e4121911287ef650a519b766400ee1a94f68af647185801e8bfe987da4092a2a9c9a7cc4
- SSDEEP 98304:afNmVLCqwtoQfYu/eWosPuPpifc8E1AQcI9FACE:a8VloU8EaQkP
- TLSH T106C64A47E8A515E5C0AEC135C6269966BB713C894B3073D76BA0FA382F73BD06DB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.