26ceff0b64572013fb9c9aa98c728d83411f97db0618fb3f122bf83deda00c29 | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-07-08...ch.exe

windows10-2004-x64

2026-07-08...ch.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_508302822b0fa3152db9c8d39c98c6ad_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
Size 7.9MB
Sample260708-e9588aaz6z
SHA256 26ceff0b64572013fb9c9aa98c728d83411f97db0618fb3f122bf83deda00c29
MD5 508302822b0fa3152db9c8d39c98c6ad
SHA1 4c47b274f42cf13bf220d02b72741287f8c66d74
SHA512 232a012d1bf5eed927b8afa0ada8d1d4cc036a9ecbb8dab1a734883cc3cd1fb6b7d8d13b2a2cf38eb34cd1d183dae25a1a446c1775b3d1555b9c7a534b271d03
SSDEEP 49152:ioanlkhlw0yJMfnmADSj0LmxTSviiMD0wx0QwVsNc34FwOMNGnQ6g/ns8V4Qfrpb:iGBfgvNkGwj/PAZO/QESEx
TLSH
T183863847FCA555E8C0AED2358A66A616BB713C494F3123E72F50B2283F76BD06DB9340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-08_508302822b0fa3152db9c8d39c98c6ad_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion trojan

Behavioral task

behavioral2

Sample

2026-07-08_508302822b0fa3152db9c8d39c98c6ad_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

defense_evasion

Malware Config

Targets

- Target
  2026-07-08_508302822b0fa3152db9c8d39c98c6ad_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.9MB
- SHA256 26ceff0b64572013fb9c9aa98c728d83411f97db0618fb3f122bf83deda00c29
- MD5 508302822b0fa3152db9c8d39c98c6ad
- SHA1 4c47b274f42cf13bf220d02b72741287f8c66d74
- SHA512 232a012d1bf5eed927b8afa0ada8d1d4cc036a9ecbb8dab1a734883cc3cd1fb6b7d8d13b2a2cf38eb34cd1d183dae25a1a446c1775b3d1555b9c7a534b271d03
- SSDEEP 49152:ioanlkhlw0yJMfnmADSj0LmxTSviiMD0wx0QwVsNc34FwOMNGnQ6g/ns8V4Qfrpb:iGBfgvNkGwj/PAZO/QESEx
- TLSH
  T183863847FCA555E8C0AED2358A66A616BB713C494F3123E72F50B2283F76BD06DB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion trojan
- Windows security bypass
  defense_evasion trojan
- Executes dropped EXE
- Windows security modification
  defense_evasion trojan
- Checks for any installed AV software in registry
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiontrojan

behavioral2

defense_evasion

© 2018-2026

Terms | Privacy