General
- Target 2026-06-27_27f81fc6eb161d01acbf5e2dda208dc7_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 6.4MB
- Sample260629-k13dvsbv6j
- SHA256 f78e5c145147e071ee7854f4894428fc2b9eadf1f4feae29206eab0c08e2b748
- MD5 27f81fc6eb161d01acbf5e2dda208dc7
- SHA1 3a2f775171a857f811f1fdb1ef9481ae9c0d14b8
- SHA512 c3dcefdbbaffdc53b429d5f487fb15dad6fbb1fd9e4216acff8ed0fba2205a91f6a8ebd8d18b53adac3ff020881bd19d829027c22253ae67679144b575ba1fc2
- SSDEEP 49152:zNAb8qPnjCrEm0Hpdd484vM3buKbhZ7HYi1qpo8BBf7l8alRZ4L/yDjtI4uH4L3g:zNl4KP0L4vcD8KAiK6baVE
- TLSH T191665A07ECA115E9C0ADD53089A7A663BF713C885B7123D71B60F6242F36BD0ADB9358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_27f81fc6eb161d01acbf5e2dda208dc7_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_27f81fc6eb161d01acbf5e2dda208dc7_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_27f81fc6eb161d01acbf5e2dda208dc7_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 6.4MB
- SHA256 f78e5c145147e071ee7854f4894428fc2b9eadf1f4feae29206eab0c08e2b748
- MD5 27f81fc6eb161d01acbf5e2dda208dc7
- SHA1 3a2f775171a857f811f1fdb1ef9481ae9c0d14b8
- SHA512 c3dcefdbbaffdc53b429d5f487fb15dad6fbb1fd9e4216acff8ed0fba2205a91f6a8ebd8d18b53adac3ff020881bd19d829027c22253ae67679144b575ba1fc2
- SSDEEP 49152:zNAb8qPnjCrEm0Hpdd484vM3buKbhZ7HYi1qpo8BBf7l8alRZ4L/yDjtI4uH4L3g:zNl4KP0L4vcD8KAiK6baVE
- TLSH T191665A07ECA115E9C0ADD53089A7A663BF713C885B7123D71B60F6242F36BD0ADB9358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE