General
- Target 2026-07-05_b641a1d5d206085c83cd439aac4b3244_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 13.2MB
- Sample260705-d31vgscx3q
- SHA256 3b69c78f7364884ca9cb6ee642a65ceb3db47b517559b6f3d9ee6161f17fd423
- MD5 b641a1d5d206085c83cd439aac4b3244
- SHA1 e25651f301281631ee62639f6e5208a89612cdcb
- SHA512 5aa186b02fea514b6c54ec61e2a9fd540db892eff12375198f3dfe70f40baf633e0d233a43dfff591f2dce9a981e77991e0f1ab114d744926f89feb860834a8e
- SSDEEP 98304:8bKuJWkw6go7my6it+kWNggXnBbvsDzgxWOCxWvD+E:7uCoboCgXWDAR7
- TLSH T1ABD63947EDA505E5C0ADD835CA269653BB713C894B2037E72B60F6242F37BD0AEB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_b641a1d5d206085c83cd439aac4b3244_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_b641a1d5d206085c83cd439aac4b3244_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_b641a1d5d206085c83cd439aac4b3244_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 13.2MB
- SHA256 3b69c78f7364884ca9cb6ee642a65ceb3db47b517559b6f3d9ee6161f17fd423
- MD5 b641a1d5d206085c83cd439aac4b3244
- SHA1 e25651f301281631ee62639f6e5208a89612cdcb
- SHA512 5aa186b02fea514b6c54ec61e2a9fd540db892eff12375198f3dfe70f40baf633e0d233a43dfff591f2dce9a981e77991e0f1ab114d744926f89feb860834a8e
- SSDEEP 98304:8bKuJWkw6go7my6it+kWNggXnBbvsDzgxWOCxWvD+E:7uCoboCgXWDAR7
- TLSH T1ABD63947EDA505E5C0ADD835CA269653BB713C894B2037E72B60F6242F37BD0AEB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.