General
- Target 2026-08-12_30b704ecba768ea128f700f3ac5e3422_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 20.5MB
- Sample260812-ktmd3azwew
- SHA256 248a04780761231a429e5d471f6f7873d9ac2dbbfbe34b30efa9235c5fb42f7c
- MD5 30b704ecba768ea128f700f3ac5e3422
- SHA1 d35b6eb3cc0d4ee102915a21a2e8193c88f401d8
- SHA512 5b460cae55619f6e67cf4460c5fd0b63402dfd307530769531f97550cf052fab482003cb36a71cbd04a2e7ea2073373567ae4a3a28935c95cc4ff1587143c8b1
- SSDEEP 196608:xjz//++r/wwjCOzFKkDvAGPNeGP31e+0qLxGc66HL4LEmOxhETcz2JLOCJLpvtLY:xX/twMtKEPNx
- TLSH T130275B57E86515E8C1ADD534C97291237B713C494B2123E71BA0F2282F77BE0AEBBB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_30b704ecba768ea128f700f3ac5e3422_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_30b704ecba768ea128f700f3ac5e3422_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_30b704ecba768ea128f700f3ac5e3422_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 20.5MB
- SHA256 248a04780761231a429e5d471f6f7873d9ac2dbbfbe34b30efa9235c5fb42f7c
- MD5 30b704ecba768ea128f700f3ac5e3422
- SHA1 d35b6eb3cc0d4ee102915a21a2e8193c88f401d8
- SHA512 5b460cae55619f6e67cf4460c5fd0b63402dfd307530769531f97550cf052fab482003cb36a71cbd04a2e7ea2073373567ae4a3a28935c95cc4ff1587143c8b1
- SSDEEP 196608:xjz//++r/wwjCOzFKkDvAGPNeGP31e+0qLxGc66HL4LEmOxhETcz2JLOCJLpvtLY:xX/twMtKEPNx
- TLSH T130275B57E86515E8C1ADD534C97291237B713C494B2123E71BA0F2282F77BE0AEBBB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.