9452da4485664245678a15185d2b78ee992b046575a5ab8ad783553bc15f16a5 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

2026-07-06...ch.exe

windows10-2004-x64

6

2026-07-06...ch.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_6c2971ccfa10a8eafc941c2768439771_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
Size 17.3MB
Sample260706-z3pccagy6r
SHA256 9452da4485664245678a15185d2b78ee992b046575a5ab8ad783553bc15f16a5
MD5 6c2971ccfa10a8eafc941c2768439771
SHA1 17ff9963ec8f8f9ae25a77d8d44885250ce3c849
SHA512 dcf0b358d9df939b34b47d8618fa62e3df207ae89dad7e7a6092a30b95125d4f972dc2fbce3b67e1c3a51dd52cb6e81ed511177af2422913aff03a2bf3668ffe
SSDEEP 98304:jXW98VXaWHMT1xzVXLgMMaYgqZ4YY0SqvidktDRA1YElIx6NyE:TrFaWHMTpckC4b0SqvvDa86t
TLSH
T185075947E86A50E4C1AEC535CA7295277B727C850F2063D35B60B6242F73BE0AEF9718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-06_6c2971ccfa10a8eafc941c2768439771_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

defense_evasion discovery persistence spyware trojan

Behavioral task

behavioral2

Sample

2026-07-06_6c2971ccfa10a8eafc941c2768439771_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery persistence spyware trojan

Malware Config

Targets

- Target
  2026-07-06_6c2971ccfa10a8eafc941c2768439771_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 17.3MB
- SHA256 9452da4485664245678a15185d2b78ee992b046575a5ab8ad783553bc15f16a5
- MD5 6c2971ccfa10a8eafc941c2768439771
- SHA1 17ff9963ec8f8f9ae25a77d8d44885250ce3c849
- SHA512 dcf0b358d9df939b34b47d8618fa62e3df207ae89dad7e7a6092a30b95125d4f972dc2fbce3b67e1c3a51dd52cb6e81ed511177af2422913aff03a2bf3668ffe
- SSDEEP 98304:jXW98VXaWHMT1xzVXLgMMaYgqZ4YY0SqvidktDRA1YElIx6NyE:TrFaWHMTpckC4b0SqvvDa86t
- TLSH
  T185075947E86A50E4C1AEC535CA7295277B727C850F2063D35B60B6242F73BE0AEF9718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence spyware trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencespywaretrojan

behavioral2

defense_evasiondiscoverypersistencespywaretrojan

© 2018-2026

Terms | Privacy