General
- Target 2026-07-19_db5c560d1cacb56e061e620613453aa3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 16.4MB
- Sample260719-b5dfvsg12r
- SHA256 7842589149dea5907239fbc634df2039c96ea7cec89fc5620608220eaad18785
- MD5 db5c560d1cacb56e061e620613453aa3
- SHA1 e415310ee7d59da0bf1a24d052b31f17d9d2318a
- SHA512 ce7f064cfc66fbe9776430ba9573ca4c655b3a4bd2cc1abe985fbc4c1c2ad66ffa473667ca3dfeca174435bf7c2a086c4618d33b00d61d222b983adf521b248f
- SSDEEP 98304:NfYwMrqcM9ULOHezVkyxmUGvrh7RrDm/RIr8vSE:N5aqHe6h7tDm/RQg/
- TLSH T125073987ECA505E4E0AED175C622D6627B713C894B3063D72B90FA342F37BD0A9B9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-19_db5c560d1cacb56e061e620613453aa3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_db5c560d1cacb56e061e620613453aa3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_db5c560d1cacb56e061e620613453aa3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 16.4MB
- SHA256 7842589149dea5907239fbc634df2039c96ea7cec89fc5620608220eaad18785
- MD5 db5c560d1cacb56e061e620613453aa3
- SHA1 e415310ee7d59da0bf1a24d052b31f17d9d2318a
- SHA512 ce7f064cfc66fbe9776430ba9573ca4c655b3a4bd2cc1abe985fbc4c1c2ad66ffa473667ca3dfeca174435bf7c2a086c4618d33b00d61d222b983adf521b248f
- SSDEEP 98304:NfYwMrqcM9ULOHezVkyxmUGvrh7RrDm/RIr8vSE:N5aqHe6h7tDm/RQg/
- TLSH T125073987ECA505E4E0AED175C622D6627B713C894B3063D72B90FA342F37BD0A9B9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables referencing combination of virtualization drivers
-
Detects executables referencing many IR and analysis tools
-
UPX dump on OEP (original entry point)