General
- Target 2026-07-01_28ec84d2dcbf93814e3ec92c35864357_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 12.8MB
- Sample260701-mc1apsbv5r
- SHA256 fbf2526215eadf6da281258d5be0783ca647a856739bb5a1a7a50dd236af16cf
- MD5 28ec84d2dcbf93814e3ec92c35864357
- SHA1 b170cf7e698e30bc548cfa7f8fb2c7b5b9311256
- SHA512 580a4d6332686a1df3f246546da4f1f785605f6c605e7656a36d4a16eacd0edf6cc093c1550714703cbec314a41a9aa15399ea965c3ca57b177f41f5ef812d1e
- SSDEEP 98304:QlRuspI20WB8GlXTFaff2z0DUMiDfuvLRFx3zuE:4lq20xsFafm0YXDuR3n
- TLSH T1F1D64A07EDA554D4C5AEC234C9779262BB317C491B3023E72B54F9242F76BE0AEB9720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_28ec84d2dcbf93814e3ec92c35864357_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_28ec84d2dcbf93814e3ec92c35864357_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260629-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_28ec84d2dcbf93814e3ec92c35864357_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 12.8MB
- SHA256 fbf2526215eadf6da281258d5be0783ca647a856739bb5a1a7a50dd236af16cf
- MD5 28ec84d2dcbf93814e3ec92c35864357
- SHA1 b170cf7e698e30bc548cfa7f8fb2c7b5b9311256
- SHA512 580a4d6332686a1df3f246546da4f1f785605f6c605e7656a36d4a16eacd0edf6cc093c1550714703cbec314a41a9aa15399ea965c3ca57b177f41f5ef812d1e
- SSDEEP 98304:QlRuspI20WB8GlXTFaff2z0DUMiDfuvLRFx3zuE:4lq20xsFafm0YXDuR3n
- TLSH T1F1D64A07EDA554D4C5AEC234C9779262BB317C491B3023E72B54F9242F76BE0AEB9720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.