General
- Target 2026-10-19_5953cd577ccb03abc45859433e456a81_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch_vidar_zxxz
- Size 25.7MB
- Sample261020-ycyyesd16w
- SHA256 60e3f8eeec1f1322e0f13a306227b70cb40bbe203fccc8e9c3b5be9938839b41
- MD5 5953cd577ccb03abc45859433e456a81
- SHA1 06e23e12c213cd808d7683f613edd9281c7f6cdb
- SHA512 9369f9f2d53c23af1fe93f3f87357b6da28ef543745264ad9d63596b3039b36405209b95990752d145b0a3220cdb47ff29968f9d811b000d526ad5d4b27289e4
- SSDEEP 196608:Nn+p3q6yYa8alcy0RzSI94U5xR4gb+KMVqChVI9CusCj6NGpYnTUpoTFP0t:oq6daey0NSJMrKKVCs9/sFQYnaeFP0
- TLSH T1F147AE03BC5A18F1D5BE8935C6A265137E317C659B3023CB3690F5286F7BBD099BA384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-19_5953cd577ccb03abc45859433e456a81_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch_vidar_zxxz.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_5953cd577ccb03abc45859433e456a81_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch_vidar_zxxz
- Size 25.7MB
- SHA256 60e3f8eeec1f1322e0f13a306227b70cb40bbe203fccc8e9c3b5be9938839b41
- MD5 5953cd577ccb03abc45859433e456a81
- SHA1 06e23e12c213cd808d7683f613edd9281c7f6cdb
- SHA512 9369f9f2d53c23af1fe93f3f87357b6da28ef543745264ad9d63596b3039b36405209b95990752d145b0a3220cdb47ff29968f9d811b000d526ad5d4b27289e4
- SSDEEP 196608:Nn+p3q6yYa8alcy0RzSI94U5xR4gb+KMVqChVI9CusCj6NGpYnTUpoTFP0t:oq6daey0NSJMrKKVCs9/sFQYnaeFP0
- TLSH T1F147AE03BC5A18F1D5BE8935C6A265137E317C659B3023CB3690F5286F7BBD099BA384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE