General
- Target 2026-07-04_3d11ee4af6907fca8b493819b19ee835_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 24.0MB
- Sample260704-klt4yahv4k
- SHA256 4f851cc133edc07481e21bf7713104f513e355b8d48fa6dbf8a298668964609d
- MD5 3d11ee4af6907fca8b493819b19ee835
- SHA1 2ce1c2897cdaf80c22a0b03b605778a1e51cb35d
- SHA512 2912f63a2e6e08f7dbe3f878050c25b546c973cd7cfdea451bdbca8e2573a5e015cf1854a07a1042c394377d6d35b8aadea9def3295e593e4abc1ea7e404b767
- SSDEEP 98304:gtJhF6XzzbXW2BaR8staFYnoibruzzRwUZvB9dspCBZE85ktoaPIw0n0dw3tFoD/:gL32BAUkJ3uzd7L9iqZP5gZqjI
- TLSH T128474A47FD6640E9C0ADC534CA6295227F717C494B3167D71B60FA286F76BE0AEBA300
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-04_3d11ee4af6907fca8b493819b19ee835_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_3d11ee4af6907fca8b493819b19ee835_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_3d11ee4af6907fca8b493819b19ee835_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 24.0MB
- SHA256 4f851cc133edc07481e21bf7713104f513e355b8d48fa6dbf8a298668964609d
- MD5 3d11ee4af6907fca8b493819b19ee835
- SHA1 2ce1c2897cdaf80c22a0b03b605778a1e51cb35d
- SHA512 2912f63a2e6e08f7dbe3f878050c25b546c973cd7cfdea451bdbca8e2573a5e015cf1854a07a1042c394377d6d35b8aadea9def3295e593e4abc1ea7e404b767
- SSDEEP 98304:gtJhF6XzzbXW2BaR8staFYnoibruzzRwUZvB9dspCBZE85ktoaPIw0n0dw3tFoD/:gL32BAUkJ3uzd7L9iqZP5gZqjI
- TLSH T128474A47FD6640E9C0ADC534CA6295227F717C494B3167D71B60FA286F76BE0AEBA300
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.