2026-07-29_3a4dac8ba29930e18d8d7650a486e7e2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-29_3a4dac8ba29930e18d8d7650a486e7e2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
Size 6.1MB
Sample260729-dbmtjsvway
SHA256 d0262bc3ab5f250edef494a661689cfb12c70e199039e9ee1c6e704210cd80cf
MD5 3a4dac8ba29930e18d8d7650a486e7e2
SHA1 f55703837bd7b7d9f332d1a1ab9b6ea9ec2db8b4
SHA512 ca8b449d489757c645413c8a883b42a9a514aedf59dea9ff39b582fffd891f903e8f4136a0febd1e1736fcfc6107c63dc79dc80acb3c90db4ac2a30badd1b494
SSDEEP 49152:Xf+qOk0Y4Wswnc6/d0i6k6zqTx/NinHYx1+184+Prhmg4vZn2RmMgY0KVK1K62pW:Xf7D6ML8a+1CP8Cg2iuqSYQ1O9hzE
TLSH
T15D563903EC6524E9C0AE913289779652BB717C481B2123D72BA0F6393F77BD0AD79394
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_3a4dac8ba29930e18d8d7650a486e7e2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

File Explorer

2026-07-29_3a4dac8ba29930e18d8d7650a486e7e2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

.exe 6.1MB

2026-07-29_3a4dac8ba29930e18d8d7650a486e7e2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 d0262bc3ab5f250edef494a661689cfb12c70e199039e9ee1c6e704210cd80cf
MD5 3a4dac8ba29930e18d8d7650a486e7e2
SHA1 f55703837bd7b7d9f332d1a1ab9b6ea9ec2db8b4
SHA512 ca8b449d489757c645413c8a883b42a9a514aedf59dea9ff39b582fffd891f903e8f4136a0febd1e1736fcfc6107c63dc79dc80acb3c90db4ac2a30badd1b494
SSDEEP 49152:Xf+qOk0Y4Wswnc6/d0i6k6zqTx/NinHYx1+184+Prhmg4vZn2RmMgY0KVK1K62pW:Xf7D6ML8a+1CP8Cg2iuqSYQ1O9hzE
TLSH
T15D563903EC6524E9C0AE913289779652BB717C481B2123D72BA0F6393F77BD0AD79394
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

554720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

313KB

Virtual Size

32.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

66KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

55KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-07-29_3a4dac8ba29930e18d8d7650a486e7e2_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

kernel32

generic