General
- Target 2026-08-24_98c6923d7951c2d33bc5abe82828424e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.4MB
- Sample260825-hm7qbatxev
- SHA256 99148c92e9c14538157f624e1cf8e2f4f979031013cb03d0f91ceda1e987c771
- MD5 98c6923d7951c2d33bc5abe82828424e
- SHA1 2636336e9641038fd46d171c7e36d69af160f015
- SHA512 f7ff8c1d37960f97d15fdab06ec9b7296818a8b3d7a9d7fe28c538a0d099c7c4a81293e9c61daaa40b0f1848e3d46f8d738dd8ed8b52117c11f2d96a74d5ac7a
- SSDEEP 98304:htC1WUQrbfxvFwzRR3wECAcZIvhn4nzegJy2ZjqvYTs3152p8Sq8QJ:h8SxvaCWZn4nzOvYTZ2S1Q
- TLSH T1EDB66A13FC6515E9C1AD92358AB2D6127B717C490B3223F76FA0B6342EB67C0AD79384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-24_98c6923d7951c2d33bc5abe82828424e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_98c6923d7951c2d33bc5abe82828424e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_98c6923d7951c2d33bc5abe82828424e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.4MB
- SHA256 99148c92e9c14538157f624e1cf8e2f4f979031013cb03d0f91ceda1e987c771
- MD5 98c6923d7951c2d33bc5abe82828424e
- SHA1 2636336e9641038fd46d171c7e36d69af160f015
- SHA512 f7ff8c1d37960f97d15fdab06ec9b7296818a8b3d7a9d7fe28c538a0d099c7c4a81293e9c61daaa40b0f1848e3d46f8d738dd8ed8b52117c11f2d96a74d5ac7a
- SSDEEP 98304:htC1WUQrbfxvFwzRR3wECAcZIvhn4nzegJy2ZjqvYTs3152p8Sq8QJ:h8SxvaCWZn4nzOvYTZ2S1Q
- TLSH T1EDB66A13FC6515E9C1AD92358AB2D6127B717C490B3223F76FA0B6342EB67C0AD79384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.