General
- Target 2026-08-18_9b797e4696e34a65d6c0492fbd01138f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 12.1MB
- Sample260818-hb5ftaxfna
- SHA256 2f50bb82808250e3767a701e37a4da914bc1bab61951ee56d53acdb21e6d3974
- MD5 9b797e4696e34a65d6c0492fbd01138f
- SHA1 15598d9c2d801741cb802e54c90dd2179fdafc61
- SHA512 ca32def419e4579715189e85f4773534b8ecb4ee11b1f0a1be4bf5ac78d30df993e06b9add16a593d37be73f71253cbc4d33b84142338b46bd74537a95ce0305
- SSDEEP 98304:ZWYNI/t4U7cwcicwfavcHI236EHg1PwPM6dJrjvfvHv4vYv+vHvav3vE5w1BcDB9:ZVImUQ8Kw06wuoBoU
- TLSH T178D63947E8A905E5D0AED175CA2695237B713C884F3063D72B60FA242F37BD0AEB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-18_9b797e4696e34a65d6c0492fbd01138f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_9b797e4696e34a65d6c0492fbd01138f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 12.1MB
- SHA256 2f50bb82808250e3767a701e37a4da914bc1bab61951ee56d53acdb21e6d3974
- MD5 9b797e4696e34a65d6c0492fbd01138f
- SHA1 15598d9c2d801741cb802e54c90dd2179fdafc61
- SHA512 ca32def419e4579715189e85f4773534b8ecb4ee11b1f0a1be4bf5ac78d30df993e06b9add16a593d37be73f71253cbc4d33b84142338b46bd74537a95ce0305
- SSDEEP 98304:ZWYNI/t4U7cwcicwfavcHI236EHg1PwPM6dJrjvfvHv4vYv+vHvav3vE5w1BcDB9:ZVImUQ8Kw06wuoBoU
- TLSH T178D63947E8A905E5D0AED175CA2695237B713C884F3063D72B60FA242F37BD0AEB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.