General
- Target 2026-08-20_db5c1a4132da6d0e4ada655e38dbd3da_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch
- Size 36.6MB
- Sample260820-ysk2hafe77
- SHA256 1365dd404fcd7b1f7158383b52b92c8e0cabfa371fb80ba1d045eab3d78dc20a
- MD5 db5c1a4132da6d0e4ada655e38dbd3da
- SHA1 2947b63a6903fb2b1bf14837d7d94139bd6ee3c1
- SHA512 57852e940fdb9a8e95853c68c02ec4e4c5ed2b7de159bda5952a4c0c4e576398ab542f78154ce81f2302af08db15ddcd034acbe71c1b66b97a9fc297e9ea9fca
- SSDEEP 196608:PKRqOApPoM7W1XTcxLvSI4I22DBVll2A+8NL:PWeP40L2+l28
- TLSH T1DF877D67E46774A5C5ADC13CC63665237EB93889433023D71B54F6602BB3FE0A9BA390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_db5c1a4132da6d0e4ada655e38dbd3da_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_db5c1a4132da6d0e4ada655e38dbd3da_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_db5c1a4132da6d0e4ada655e38dbd3da_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch
- Size 36.6MB
- SHA256 1365dd404fcd7b1f7158383b52b92c8e0cabfa371fb80ba1d045eab3d78dc20a
- MD5 db5c1a4132da6d0e4ada655e38dbd3da
- SHA1 2947b63a6903fb2b1bf14837d7d94139bd6ee3c1
- SHA512 57852e940fdb9a8e95853c68c02ec4e4c5ed2b7de159bda5952a4c0c4e576398ab542f78154ce81f2302af08db15ddcd034acbe71c1b66b97a9fc297e9ea9fca
- SSDEEP 196608:PKRqOApPoM7W1XTcxLvSI4I22DBVll2A+8NL:PWeP40L2+l28
- TLSH T1DF877D67E46774A5C5ADC13CC63665237EB93889433023D71B54F6602BB3FE0A9BA390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
UPX dump on OEP (original entry point)