General
- Target 2026-08-22_3cdde73ea12398e39e4232bc696cf7e4_coinminer_dosia_icedid_poet-rat_quasar-rat_snatch_vidar
- Size 22.8MB
- Sample260823-lmpfhsvgnd
- SHA256 864267a7835d4a303b9b7a305b909ec447c0b5e4446af61fbaf4348515d4b8bc
- MD5 3cdde73ea12398e39e4232bc696cf7e4
- SHA1 43e9b565b985aa6e249a5220ad62339eb0730750
- SHA512 9710f4e1f7d2a76554a87f3275e4f9539ed78b2117df47c3816f3cf2e8253597e96059349433d1f44bb8fbd27789bb28b0b15731167e09afd3313bc1fc98c244
- SSDEEP 196608:IhRFhNfs0hZXGGR5XPfJqsWWHmNTMaS5C4k1:IRhfZ2GX3JRFGf942
- TLSH T1B7374963E89219D4C4EE85B4D672812BBA617C1D0B7813D726A1F3202F37BE0DEB2755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_3cdde73ea12398e39e4232bc696cf7e4_coinminer_dosia_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_3cdde73ea12398e39e4232bc696cf7e4_coinminer_dosia_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_3cdde73ea12398e39e4232bc696cf7e4_coinminer_dosia_icedid_poet-rat_quasar-rat_snatch_vidar
- Size 22.8MB
- SHA256 864267a7835d4a303b9b7a305b909ec447c0b5e4446af61fbaf4348515d4b8bc
- MD5 3cdde73ea12398e39e4232bc696cf7e4
- SHA1 43e9b565b985aa6e249a5220ad62339eb0730750
- SHA512 9710f4e1f7d2a76554a87f3275e4f9539ed78b2117df47c3816f3cf2e8253597e96059349433d1f44bb8fbd27789bb28b0b15731167e09afd3313bc1fc98c244
- SSDEEP 196608:IhRFhNfs0hZXGGR5XPfJqsWWHmNTMaS5C4k1:IRhfZ2GX3JRFGf942
- TLSH T1B7374963E89219D4C4EE85B4D672812BBA617C1D0B7813D726A1F3202F37BE0DEB2755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.