Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
03/07/2026, 04:30
General
- Target 2026-07-03_169d60289978c8202c437213ba76ee11_coinminer_dosia_glassworm_ngrbot_poet-rat_quasar-rat_snatch.exe
- Size 14.4MB
- Sample260703-e43wxabv3w
- SHA256 56c6b81c9c118c9e6a7302ab52d88541c2f773c19b4d8b1936eeefdc2de502b6
Score
9/10
Malware Config
Signatures
- Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 2 IoCs
- Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs
- Detects executables Discord URL observed in first stage droppers 1 IoCs
- Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
- Detects executables containing URLs to raw contents of a Github gist 1 IoCs
- UPX dump on OEP (original entry point) 1 IoCs
- UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-03_169d60289978c8202c437213ba76ee11_coinminer_dosia_glassworm_ngrbot_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-03_169d60289978c8202c437213ba76ee11_coinminer_dosia_glassworm_ngrbot_poet-rat_quasar-rat_snatch.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4612-0-0x00007FF6F6BC0000-0x00007FF6F96C1000-memory.dmp
memory/4612-1-0x00007FF6F6BC0000-0x00007FF6F96C1000-memory.dmp