General
- Target 2026-08-27_daf91fa4437828b7c8cead4abcb93add_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 6.9MB
- Sample260827-h38mjs1bmb
- SHA256 fa0d226595049aa5c4980ce72dd77e068a3b984364c55fd3dcf8fee3757b9a8e
- MD5 daf91fa4437828b7c8cead4abcb93add
- SHA1 2f25de63688ee265843a7ff2607e11741d5ef1b7
- SHA512 5c75fb6d7d93560e8f720f37342ed827de3a87d3184f64676fcf69fdd94984e837fa6d872978cd639a5d899b349acaf343b5a9e52ce264a9ad50f6c4d37193b1
- SSDEEP 98304:suFm54wk7VDCfQQh+FXBoC6wCQuW1MfphfGwl6F9GEn:sOKwofQTfn
- TLSH T1BF763803FCA924E4C1AE96358973A153BFA17C491B2123D72B90F6283F76BD06DB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_daf91fa4437828b7c8cead4abcb93add_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_daf91fa4437828b7c8cead4abcb93add_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_daf91fa4437828b7c8cead4abcb93add_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 6.9MB
- SHA256 fa0d226595049aa5c4980ce72dd77e068a3b984364c55fd3dcf8fee3757b9a8e
- MD5 daf91fa4437828b7c8cead4abcb93add
- SHA1 2f25de63688ee265843a7ff2607e11741d5ef1b7
- SHA512 5c75fb6d7d93560e8f720f37342ed827de3a87d3184f64676fcf69fdd94984e837fa6d872978cd639a5d899b349acaf343b5a9e52ce264a9ad50f6c4d37193b1
- SSDEEP 98304:suFm54wk7VDCfQQh+FXBoC6wCQuW1MfphfGwl6F9GEn:sOKwofQTfn
- TLSH T1BF763803FCA924E4C1AE96358973A153BFA17C491B2123D72B90F6283F76BD06DB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.