General
- Target 2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 30.6MB
- Sample260731-dle7fsak2t
- SHA256 bbd2e90a45fbd5f116f7df8162187a52e72edcf584d56d82199fc3dadbbcf210
- MD5 5a04b9b7ebfcc735780e931ad3927f16
- SHA1 9dfaa636cbfd36ac4d26e69ed1491c9960e64c4c
- SHA512 c16b267c278d8d1e6a356dd4daf2c0c6065cfbfcd2bd82a70231b746ad072f3634cf31de28b2a92f4ff9ae3f3ea34189ad7c9dd02a5e798e4cd0f4d0165c0765
- SSDEEP 196608:AomEfup30YAGn0/QnMBeoSyE3c6dY2Gg7lfXL40HWLqRstoFp8XUZ1Tbk+yCuw:Ab5CSyIhlPL40LR2Q
- TLSH T16E674BE3F8926A94C4EDC374C672416BB6623C191B3463D712A0FB241F3ABD0EA76745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 30.6MB
- SHA256 bbd2e90a45fbd5f116f7df8162187a52e72edcf584d56d82199fc3dadbbcf210
- MD5 5a04b9b7ebfcc735780e931ad3927f16
- SHA1 9dfaa636cbfd36ac4d26e69ed1491c9960e64c4c
- SHA512 c16b267c278d8d1e6a356dd4daf2c0c6065cfbfcd2bd82a70231b746ad072f3634cf31de28b2a92f4ff9ae3f3ea34189ad7c9dd02a5e798e4cd0f4d0165c0765
- SSDEEP 196608:AomEfup30YAGn0/QnMBeoSyE3c6dY2Gg7lfXL40HWLqRstoFp8XUZ1Tbk+yCuw:Ab5CSyIhlPL40LR2Q
- TLSH T16E674BE3F8926A94C4EDC374C672416BB6623C191B3463D712A0FB241F3ABD0EA76745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1