General
- Target 2026-09-13_5b3d3c1120715f23472e5fcb8440308a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 9.0MB
- Sample260913-r84efsybkd
- SHA256 3bcc268c57508a3417926d7b68bbf8cf7e38e749d16f8ed71192f83eed79c52f
- MD5 5b3d3c1120715f23472e5fcb8440308a
- SHA1 21471997d96ec519f4ea64fc179f7f4eedaa38af
- SHA512 2568fd19cb48b40b979c131eef6a73ac5945e117fcb9fe162d7cfbbcc3a4b5fd256207dea624012a29644607769a32280a6f4afe9a0af15865e711fda7c25d80
- SSDEEP 98304:OJogbTD48dVM6w1HlGHoDEb67boDybjOEvELtF738KcN78:OLk8214hwcDyjvELtFgLNw
- TLSH T196A68C03EC5555E9C1AEA2318AB392127B71BC490B3267D36B50F2382F77BD06DB9358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-13_5b3d3c1120715f23472e5fcb8440308a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_5b3d3c1120715f23472e5fcb8440308a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_5b3d3c1120715f23472e5fcb8440308a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 9.0MB
- SHA256 3bcc268c57508a3417926d7b68bbf8cf7e38e749d16f8ed71192f83eed79c52f
- MD5 5b3d3c1120715f23472e5fcb8440308a
- SHA1 21471997d96ec519f4ea64fc179f7f4eedaa38af
- SHA512 2568fd19cb48b40b979c131eef6a73ac5945e117fcb9fe162d7cfbbcc3a4b5fd256207dea624012a29644607769a32280a6f4afe9a0af15865e711fda7c25d80
- SSDEEP 98304:OJogbTD48dVM6w1HlGHoDEb67boDybjOEvELtF738KcN78:OLk8214hwcDyjvELtFgLNw
- TLSH T196A68C03EC5555E9C1AEA2318AB392127B71BC490B3267D36B50F2382F77BD06DB9358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.