General
- Target 2026-07-22_55091453aab7bf6645f75a24d0c0e785_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.3MB
- Sample260722-gljfnabb56
- SHA256 6c36a14d7cedba61d0c203671467bed263783fd105669772846a21018e81e75d
- MD5 55091453aab7bf6645f75a24d0c0e785
- SHA1 9b4f0a9c67b45ab9ec32c14a4af2edda75f285a1
- SHA512 1914aa6d43c4353b57fde96bb303375af5357a7aa4ad82b41bda6ba5f067e39e221a5bba889d7dd2a53cdcfcb463f58e4fa212b52855191ad5f9c1faf835a985
- SSDEEP 98304:oymlu2MMdlPK3GNDUwlcEcX+3PiCx67+CxIrsOfRkLys1Di4rH:oTRY3MDVVMudfbmDP
- TLSH T11BB67D03FC6554E9C1AD923189B292537B717C880B3227D72B50F6386F76BD0AEBA354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_55091453aab7bf6645f75a24d0c0e785_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_55091453aab7bf6645f75a24d0c0e785_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_55091453aab7bf6645f75a24d0c0e785_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.3MB
- SHA256 6c36a14d7cedba61d0c203671467bed263783fd105669772846a21018e81e75d
- MD5 55091453aab7bf6645f75a24d0c0e785
- SHA1 9b4f0a9c67b45ab9ec32c14a4af2edda75f285a1
- SHA512 1914aa6d43c4353b57fde96bb303375af5357a7aa4ad82b41bda6ba5f067e39e221a5bba889d7dd2a53cdcfcb463f58e4fa212b52855191ad5f9c1faf835a985
- SSDEEP 98304:oymlu2MMdlPK3GNDUwlcEcX+3PiCx67+CxIrsOfRkLys1Di4rH:oTRY3MDVVMudfbmDP
- TLSH T11BB67D03FC6554E9C1AD923189B292537B717C880B3227D72B50F6386F76BD0AEBA354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE