General
- Target 2026-08-12_ca98944b19ad149a561432ea67a8f3b6_coinminer_dosia_poet-rat_quasar-rat_snatch
- Size 22.1MB
- Sample260813-gp2rea1zav
- SHA256 a6547c7ab980aa2ad5e649d341510a7db07695573674b84156d54748b68d8cd3
- MD5 ca98944b19ad149a561432ea67a8f3b6
- SHA1 9c068f712682f53668d7f1f01483225c75f81b08
- SHA512 50c354ad207c35f5e48a65226ecc42be60ed796a71e70eced2e0538f26599193b6a723dcebffb7c6cd44f0167f91939b29cdc9bef1978b18f2cd0306a0b1d808
- SSDEEP 98304:BZnnFEhwVXt0140qj32Wf5vBYQep0cJEKji16p6W5+vtcBunBtFI3S6SOEA9OmXm:BDkit0i0Mf5vCQe/Q1gQjFI3S6SjA9Q
- TLSH T1DB375AA3E89316C4C4EEC2B4C672416BBA667C490B3823E71690F7211F367D4DEB6725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_ca98944b19ad149a561432ea67a8f3b6_coinminer_dosia_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_ca98944b19ad149a561432ea67a8f3b6_coinminer_dosia_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_ca98944b19ad149a561432ea67a8f3b6_coinminer_dosia_poet-rat_quasar-rat_snatch
- Size 22.1MB
- SHA256 a6547c7ab980aa2ad5e649d341510a7db07695573674b84156d54748b68d8cd3
- MD5 ca98944b19ad149a561432ea67a8f3b6
- SHA1 9c068f712682f53668d7f1f01483225c75f81b08
- SHA512 50c354ad207c35f5e48a65226ecc42be60ed796a71e70eced2e0538f26599193b6a723dcebffb7c6cd44f0167f91939b29cdc9bef1978b18f2cd0306a0b1d808
- SSDEEP 98304:BZnnFEhwVXt0140qj32Wf5vBYQep0cJEKji16p6W5+vtcBunBtFI3S6SOEA9OmXm:BDkit0i0Mf5vCQe/Q1gQjFI3S6SjA9Q
- TLSH T1DB375AA3E89316C4C4EEC2B4C672416BBA667C490B3823E71690F7211F367D4DEB6725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE