General
- Target 2026-11-03_3c00a055c221c5137870db1cbfdd83dc_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar
- Size 10.1MB
- Sample261104-28e2zad16x
- SHA256 04f49c877b0182a24b52c934314e9ce75596f5b2e457e6b346fbfb07a946f44b
- MD5 3c00a055c221c5137870db1cbfdd83dc
- SHA1 4cfde1a384031c798887c745df36a0ca1508cb94
- SHA512 62cfe2ec334e79c8f407c6df9f9d0d0da958b694993404c2401041d212fa7eb42a4db3502e814b0461054893110c4754439490a194babe17852b369cc6f02081
- SSDEEP 49152:YQ/fvSCk6CkIezqk8sHW7SBgxdcLvdMBXaVdJEdMSiYR5rMgcwp1p2XrPzn7jJSN:YQ39WeiGA/n4dCGVma6WVB/NBEQLk
- TLSH T1E4B65B17E8A500E9C46E8674857399137B727C594B3123CB3768F2286F3BBE0ADB6750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-03_3c00a055c221c5137870db1cbfdd83dc_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_3c00a055c221c5137870db1cbfdd83dc_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_3c00a055c221c5137870db1cbfdd83dc_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar
- Size 10.1MB
- SHA256 04f49c877b0182a24b52c934314e9ce75596f5b2e457e6b346fbfb07a946f44b
- MD5 3c00a055c221c5137870db1cbfdd83dc
- SHA1 4cfde1a384031c798887c745df36a0ca1508cb94
- SHA512 62cfe2ec334e79c8f407c6df9f9d0d0da958b694993404c2401041d212fa7eb42a4db3502e814b0461054893110c4754439490a194babe17852b369cc6f02081
- SSDEEP 49152:YQ/fvSCk6CkIezqk8sHW7SBgxdcLvdMBXaVdJEdMSiYR5rMgcwp1p2XrPzn7jJSN:YQ39WeiGA/n4dCGVma6WVB/NBEQLk
- TLSH T1E4B65B17E8A500E9C46E8674857399137B727C594B3123CB3768F2286F3BBE0ADB6750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.