2026-07-29_73536a0acc3f060f2acea668e333a903_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-29_73536a0acc3f060f2acea668e333a903_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
Size 20.0MB
Sample260729-c7b69adf76
SHA256 2abf233dde40d3a7beb019a227b23a0cf25ebd523fb162743ab71571b8b4d468
MD5 73536a0acc3f060f2acea668e333a903
SHA1 819e8a984a13b01f0054a3832678d5f7d77532f3
SHA512 7ad0ac9c8cb044b1746dba70f7a57aba269aeea2c6bc5dccb8f3ed3ba0982b985df474e090bf3a3957067f08cdd764a6e7ab1040b34d57d74cb04cd9dc44006e
SSDEEP 98304:/cmQD0JRlZRx/MTTA7FfCAjCpaQz65R5t/MhD0W6bHgKyFalwGQkKmLDm5boObEr:EzIJR2ZyCpaQ5mWQryFgxQ6KJoOI/j
TLSH
T1D4275A67F89410E9C5ADE138C562A166BB727C48872033D31F60FA296F72BD05FBA750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects executables referencing credit card regular expressions 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_CC_Regex

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_73536a0acc3f060f2acea668e333a903_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

File Explorer

2026-07-29_73536a0acc3f060f2acea668e333a903_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

.exe 20.0MB

2026-07-29_73536a0acc3f060f2acea668e333a903_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 2abf233dde40d3a7beb019a227b23a0cf25ebd523fb162743ab71571b8b4d468
MD5 73536a0acc3f060f2acea668e333a903
SHA1 819e8a984a13b01f0054a3832678d5f7d77532f3
SHA512 7ad0ac9c8cb044b1746dba70f7a57aba269aeea2c6bc5dccb8f3ed3ba0982b985df474e090bf3a3957067f08cdd764a6e7ab1040b34d57d74cb04cd9dc44006e
SSDEEP 98304:/cmQD0JRlZRx/MTTA7FfCAjCpaQz65R5t/MhD0W6bHgKyFalwGQkKmLDm5boObEr:EzIJR2ZyCpaQ5mWQryFgxQ6KJoOI/j
TLSH
T1D4275A67F89410E9C5ADE138C562A166BB727C48872033D31F60FA296F72BD05FBA750
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Detects executables referencing credit card regular expressions
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

559904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

8.7MB

Virtual Size

8.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10.4MB

Virtual Size

10.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

587KB

Virtual Size

32.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

191KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

201KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-07-29_73536a0acc3f060f2acea668e333a903_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

kernel32

generic