General
- Target 2026-09-10_9268988e50338f2af98416751e0f8485_coinminer_dosia_glassworm_hacktools_poet-rat_quasar-rat_snatch
- Size 10.9MB
- Sample260910-qvmn4scq8w
- SHA256 d85681dcd690d28bd8af523a22c9c65ff1faa074ab1d007179df390dc388932e
- MD5 9268988e50338f2af98416751e0f8485
- SHA1 fb39b0e5ad83b39134b0231c72f8384f41d04fda
- SHA512 d66ea88056fbb3c91a66020d407864687990fb19c378439842e915999a534db52595b300ebfc6ead40782c3013f9fde3a2314bd8c35e36545c3973eeadb4b08b
- SSDEEP 98304:OdN0ieY+oMGXTLV3PswzmEjSISwyp1ybii0XaCEl7CQBKiPXayGL7/rDTx:OIZeLVEUD3Ubybi3XaCEl7Cqnmnx
- TLSH T1E3B66A43ED5525EAC1ADA230C9B792137F717C491B2223D75B90B2387EB6BD0AD7A340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_9268988e50338f2af98416751e0f8485_coinminer_dosia_glassworm_hacktools_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_9268988e50338f2af98416751e0f8485_coinminer_dosia_glassworm_hacktools_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_9268988e50338f2af98416751e0f8485_coinminer_dosia_glassworm_hacktools_poet-rat_quasar-rat_snatch
- Size 10.9MB
- SHA256 d85681dcd690d28bd8af523a22c9c65ff1faa074ab1d007179df390dc388932e
- MD5 9268988e50338f2af98416751e0f8485
- SHA1 fb39b0e5ad83b39134b0231c72f8384f41d04fda
- SHA512 d66ea88056fbb3c91a66020d407864687990fb19c378439842e915999a534db52595b300ebfc6ead40782c3013f9fde3a2314bd8c35e36545c3973eeadb4b08b
- SSDEEP 98304:OdN0ieY+oMGXTLV3PswzmEjSISwyp1ybii0XaCEl7CQBKiPXayGL7/rDTx:OIZeLVEUD3Ubybi3XaCEl7Cqnmnx
- TLSH T1E3B66A43ED5525EAC1ADA230C9B792137F717C491B2223D75B90B2387EB6BD0AD7A340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.