General
- Target 2026-08-27_70d1f6c609e7e39fac3c7bb87bd52c63_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 9.9MB
- Sample260827-slyfcsxang
- SHA256 4fc32e8b8477704e44d968b092fe5c8c3b9b87711c2055e506cd23b2813e783e
- MD5 70d1f6c609e7e39fac3c7bb87bd52c63
- SHA1 13b0cf2116d4dfa1287e4b5b7dd95412d4347d14
- SHA512 96be99ea4de499c4fc38b9dd0d5abd6e16d1f7b249d73db6acf20583013257a68c6735ae6cf79ddbb5295a6b21eca69dc55741b0c2b5348ba0c8260bf9925adc
- SSDEEP 98304:3GiT/ICLr4T/pYJpUkeF9VEdmZFj1fkACUvNFYl62fslYAWxO8v+5FtdnHPQuP:3lAoeW8ZJ1MACUvNFYl6HYdxboPQ2
- TLSH T123B67C03EC5515E9C1EE96308AB396537B717C480B2267E32B90F6387E76BE06DB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-27_70d1f6c609e7e39fac3c7bb87bd52c63_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_70d1f6c609e7e39fac3c7bb87bd52c63_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_70d1f6c609e7e39fac3c7bb87bd52c63_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 9.9MB
- SHA256 4fc32e8b8477704e44d968b092fe5c8c3b9b87711c2055e506cd23b2813e783e
- MD5 70d1f6c609e7e39fac3c7bb87bd52c63
- SHA1 13b0cf2116d4dfa1287e4b5b7dd95412d4347d14
- SHA512 96be99ea4de499c4fc38b9dd0d5abd6e16d1f7b249d73db6acf20583013257a68c6735ae6cf79ddbb5295a6b21eca69dc55741b0c2b5348ba0c8260bf9925adc
- SSDEEP 98304:3GiT/ICLr4T/pYJpUkeF9VEdmZFj1fkACUvNFYl62fslYAWxO8v+5FtdnHPQuP:3lAoeW8ZJ1MACUvNFYl6HYdxboPQ2
- TLSH T123B67C03EC5515E9C1EE96308AB396537B717C480B2267E32B90F6387E76BE06DB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.