2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
Size 30.6MB
Sample260731-dle7fsak2t
SHA256 bbd2e90a45fbd5f116f7df8162187a52e72edcf584d56d82199fc3dadbbcf210
MD5 5a04b9b7ebfcc735780e931ad3927f16
SHA1 9dfaa636cbfd36ac4d26e69ed1491c9960e64c4c
SHA512 c16b267c278d8d1e6a356dd4daf2c0c6065cfbfcd2bd82a70231b746ad072f3634cf31de28b2a92f4ff9ae3f3ea34189ad7c9dd02a5e798e4cd0f4d0165c0765
SSDEEP 196608:AomEfup30YAGn0/QnMBeoSyE3c6dY2Gg7lfXL40HWLqRstoFp8XUZ1Tbk+yCuw:Ab5CSyIhlPL40LR2Q
TLSH
T16E674BE3F8926A94C4EDC374C672416BB6623C191B3463D712A0FB241F3ABD0EA76745
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

File Explorer

2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

.exe 30.6MB

2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
SHA256 bbd2e90a45fbd5f116f7df8162187a52e72edcf584d56d82199fc3dadbbcf210
MD5 5a04b9b7ebfcc735780e931ad3927f16
SHA1 9dfaa636cbfd36ac4d26e69ed1491c9960e64c4c
SHA512 c16b267c278d8d1e6a356dd4daf2c0c6065cfbfcd2bd82a70231b746ad072f3634cf31de28b2a92f4ff9ae3f3ea34189ad7c9dd02a5e798e4cd0f4d0165c0765
SSDEEP 196608:AomEfup30YAGn0/QnMBeoSyE3c6dY2Gg7lfXL40HWLqRstoFp8XUZ1Tbk+yCuw:Ab5CSyIhlPL40LR2Q
TLSH
T16E674BE3F8926A94C4EDC374C672416BB6623C191B3463D712A0FB241F3ABD0EA76745
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

561024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

16.0MB

Virtual Size

16.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13.4MB

Virtual Size

13.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

742KB

Virtual Size

33.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

282KB

Virtual Size

282KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

201KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-07-31_5a04b9b7ebfcc735780e931ad3927f16_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

kernel32

generic