General
- Target 2026-06-28_dd17fe741af1e201f13f54b6ae6e418c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.4MB
- Sample260628-w735hsb18j
- SHA256 642bb3c7088593d22c5daf7c59a695c611fc99a96f91b2d6dff70e6fba6dc54a
- MD5 dd17fe741af1e201f13f54b6ae6e418c
- SHA1 e0cf5a8674d82d33d16bb64840004e7f015cdba7
- SHA512 a46011b0f400c77dad899b2621ed31049a5c7e44b4eba32a84db10e0452cfd6657c3e2520c91f3c3838d9d230676bd4a6df17cfabc8dd3948e7f5395a6629c09
- SSDEEP 98304:tA6Dwp4wiw7I/tAH3d+y7Ef33+CI+UEf:tHw4WEy7eeN+tf
- TLSH T157B63947ECB525A5E0AD907686629512BBB13C884F30A3C77E50FA342F37BD079B9718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-28_dd17fe741af1e201f13f54b6ae6e418c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_dd17fe741af1e201f13f54b6ae6e418c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_dd17fe741af1e201f13f54b6ae6e418c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.4MB
- SHA256 642bb3c7088593d22c5daf7c59a695c611fc99a96f91b2d6dff70e6fba6dc54a
- MD5 dd17fe741af1e201f13f54b6ae6e418c
- SHA1 e0cf5a8674d82d33d16bb64840004e7f015cdba7
- SHA512 a46011b0f400c77dad899b2621ed31049a5c7e44b4eba32a84db10e0452cfd6657c3e2520c91f3c3838d9d230676bd4a6df17cfabc8dd3948e7f5395a6629c09
- SSDEEP 98304:tA6Dwp4wiw7I/tAH3d+y7Ef33+CI+UEf:tHw4WEy7eeN+tf
- TLSH T157B63947ECB525A5E0AD907686629512BBB13C884F30A3C77E50FA342F37BD079B9718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)