General
- Target 2026-07-11_cf8830c116a96c7af9c756049ce309c6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.1MB
- Sample260711-slde7adv5p
- SHA256 435bcebd401e2c1dfd37ffac570c81b3a7891dff23388a3895129a3d1085ffe6
- MD5 cf8830c116a96c7af9c756049ce309c6
- SHA1 2e4d7f55c6c45905719432af3595ab9bef2460c2
- SHA512 d924f9b5694b9d3a9ecb44015ab891672dca873610ce447db6067b9c55e3573688abab8a918c8ec12c4e5e936f99571edc945ff04ef149283c09ec07233408d8
- SSDEEP 49152:TOnkcX1jD5dg+FmYxiwt3TYSnEpoXTgpI+8vbJ5kSADSsbpErdJ5mr06x6b7TprW:TOPFX5V28lSod3rjXMXIBEUEft
- TLSH T112B65B47EDE599E5C1ADD130CAB29252BB727C494B2263C31B60F6342F72BD09EB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_cf8830c116a96c7af9c756049ce309c6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_cf8830c116a96c7af9c756049ce309c6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_cf8830c116a96c7af9c756049ce309c6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.1MB
- SHA256 435bcebd401e2c1dfd37ffac570c81b3a7891dff23388a3895129a3d1085ffe6
- MD5 cf8830c116a96c7af9c756049ce309c6
- SHA1 2e4d7f55c6c45905719432af3595ab9bef2460c2
- SHA512 d924f9b5694b9d3a9ecb44015ab891672dca873610ce447db6067b9c55e3573688abab8a918c8ec12c4e5e936f99571edc945ff04ef149283c09ec07233408d8
- SSDEEP 49152:TOnkcX1jD5dg+FmYxiwt3TYSnEpoXTgpI+8vbJ5kSADSsbpErdJ5mr06x6b7TprW:TOPFX5V28lSod3rjXMXIBEUEft
- TLSH T112B65B47EDE599E5C1ADD130CAB29252BB727C494B2263C31B60F6342F72BD09EB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory