2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
Size 10.5MB
Sample260723-gp4wrsha32
SHA256 ae130e7e8b7fc3a294a0944c633b018e19ba7159dd991184de5e1a2169885333
MD5 3741a0564052d6a5895146a0a96c5d67
SHA1 58defa3777325d71c3ecaebde8adf4e895cdb1dd
SHA512 0351fd3717fe6b858ff53edf4ded02ef65a6e06d5a66199a6b9838995262d9408da85d42e34079b7fe3bb932cbf1fa3c02b74725a2928840f46e5fa25d41f7d9
SSDEEP 98304:1KoCPh1hLDJLQXaEon9lAdm/1svGYVvi+WIhpJEvjPjmu7X:121JOonfAd3BVK+fHqjjmu
TLSH
T1DCB67C47ECA515E9C1AD923089B396137B727C894B3263D32B60B2387E777E06E79314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

File Explorer

2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

.exe 10.5MB

2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
SHA256 ae130e7e8b7fc3a294a0944c633b018e19ba7159dd991184de5e1a2169885333
MD5 3741a0564052d6a5895146a0a96c5d67
SHA1 58defa3777325d71c3ecaebde8adf4e895cdb1dd
SHA512 0351fd3717fe6b858ff53edf4ded02ef65a6e06d5a66199a6b9838995262d9408da85d42e34079b7fe3bb932cbf1fa3c02b74725a2928840f46e5fa25d41f7d9
SSDEEP 98304:1KoCPh1hLDJLQXaEon9lAdm/1svGYVvi+WIhpJEvjPjmu7X:121JOonfAd3BVK+fHqjjmu
TLSH
T1DCB67C47ECA515E9C1AD923089B396137B727C894B3263D32B60B2387E777E06E79314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

555776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

411KB

Virtual Size

32.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

78KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

331B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

574KB

Virtual Size

573KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

120KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

728KB

Virtual Size

728KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/90

Size

219KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

73KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

580KB

Virtual Size

580KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-07-23_3741a0564052d6a5895146a0a96c5d67_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

kernel32

generic