General
- Target 2026-07-31_dd7d007e901ba43b183b8e43d5a5380e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.5MB
- Sample260801-blk2labd44
- SHA256 86b7cb3d66446b0311d95a06a8be728531ba4235a9e4e7a264c728c690e3b580
- MD5 dd7d007e901ba43b183b8e43d5a5380e
- SHA1 124b45b9b84315b9c3dca856b570c07d60c10fa7
- SHA512 1931df38e22dda4ead5af6fed33fabb0eba2aba0e3fa5f0d235fea9b6abac65c304068c9eab421d32f192edfd12a47b998b78a5f7171a45820bbdd4ef7439389
- SSDEEP 98304:aucXERKP0g3E9Onj6n00hWWl/+4V1ZixKE/:avEU0BhW+/LUX
- TLSH T132E64A43E97561E5E0AEA135CA7695137BB13C894B3063C35B90F7242F37BD0AAB9708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-31_dd7d007e901ba43b183b8e43d5a5380e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_dd7d007e901ba43b183b8e43d5a5380e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_dd7d007e901ba43b183b8e43d5a5380e_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.5MB
- SHA256 86b7cb3d66446b0311d95a06a8be728531ba4235a9e4e7a264c728c690e3b580
- MD5 dd7d007e901ba43b183b8e43d5a5380e
- SHA1 124b45b9b84315b9c3dca856b570c07d60c10fa7
- SHA512 1931df38e22dda4ead5af6fed33fabb0eba2aba0e3fa5f0d235fea9b6abac65c304068c9eab421d32f192edfd12a47b998b78a5f7171a45820bbdd4ef7439389
- SSDEEP 98304:aucXERKP0g3E9Onj6n00hWWl/+4V1ZixKE/:avEU0BhW+/LUX
- TLSH T132E64A43E97561E5E0AEA135CA7695137BB13C894B3063C35B90F7242F37BD0AAB9708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
UPX dump on OEP (original entry point)