ea447412d74853d5c29527f735ee8a097a78e18b7587cd92cc887806b529c372 | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-07-09...ch.exe

windows10-2004-x64

2026-07-09...ch.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_292e33869d7f6377b825d64eb4a148c8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
Size 7.9MB
Sample260709-ctx7kabz3j
SHA256 ea447412d74853d5c29527f735ee8a097a78e18b7587cd92cc887806b529c372
MD5 292e33869d7f6377b825d64eb4a148c8
SHA1 95c1a23398bffbd14680053ecd1b23cfbe313818
SHA512 f1a88b232bea45603ebbe527b58ee0e9d5e0f160db6a5c67657f55da66b66aca820e8e4b5c3171ee5d085609da4afa5e3d86487aafa417b8d555bcc467562df7
SSDEEP 49152:hlccDWA2I+JCOs3ok6c9/87lS51zNHsr2cG8ml8LJinT7bcd5rxJ/RuQBoeYSgQe:hbIJmginAD//ghQ16pEG
TLSH
T1DA862807FDA614E8C0ADD2358A629567BA723C494F3127E32F50B6242FB6BD06DF9350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-09_292e33869d7f6377b825d64eb4a148c8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion trojan

Behavioral task

behavioral2

Sample

2026-07-09_292e33869d7f6377b825d64eb4a148c8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

defense_evasion

Malware Config

Targets

- Target
  2026-07-09_292e33869d7f6377b825d64eb4a148c8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.9MB
- SHA256 ea447412d74853d5c29527f735ee8a097a78e18b7587cd92cc887806b529c372
- MD5 292e33869d7f6377b825d64eb4a148c8
- SHA1 95c1a23398bffbd14680053ecd1b23cfbe313818
- SHA512 f1a88b232bea45603ebbe527b58ee0e9d5e0f160db6a5c67657f55da66b66aca820e8e4b5c3171ee5d085609da4afa5e3d86487aafa417b8d555bcc467562df7
- SSDEEP 49152:hlccDWA2I+JCOs3ok6c9/87lS51zNHsr2cG8ml8LJinT7bcd5rxJ/RuQBoeYSgQe:hbIJmginAD//ghQ16pEG
- TLSH
  T1DA862807FDA614E8C0ADD2358A629567BA723C494F3127E32F50B6242FB6BD06DF9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion trojan
- Windows security bypass
  defense_evasion trojan
- Executes dropped EXE
- Windows security modification
  defense_evasion trojan
- Checks for any installed AV software in registry
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiontrojan

behavioral2

defense_evasion

© 2018-2026

Terms | Privacy