General
- Target 2026-08-04_9386dc3ca19c5b354c2dd8801b8349e1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 25.8MB
- Sample260804-2jmqhsfk4y
- SHA256 d1abdf49d048cd69d9f6ba53b261e208e889dd56aacbb16039291e6846a0e932
- MD5 9386dc3ca19c5b354c2dd8801b8349e1
- SHA1 a44cdb7939bf81266cc96ecedde92cfd1751dcb0
- SHA512 04f70efe88ad4c68bbcecb495b79e1db77e92f8e4d8127e28f36b9441bf9a78667fb1f0cb184269f194c95401b5c8532a37e8144d021abb88e62be67aaae8075
- SSDEEP 98304:rAZYlXD2UfvsCIatXv2Vtb+71Oo2SUktJK2xdDgvn2bTyMLEfTXD:rtZD3cSm5SrtQ2xdD9yMYfTX
- TLSH T1C3474A67F9555194E1EEC033C67252267BA23C89073423D72B90F762AF33BE05A7A358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-04_9386dc3ca19c5b354c2dd8801b8349e1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_9386dc3ca19c5b354c2dd8801b8349e1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_9386dc3ca19c5b354c2dd8801b8349e1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 25.8MB
- SHA256 d1abdf49d048cd69d9f6ba53b261e208e889dd56aacbb16039291e6846a0e932
- MD5 9386dc3ca19c5b354c2dd8801b8349e1
- SHA1 a44cdb7939bf81266cc96ecedde92cfd1751dcb0
- SHA512 04f70efe88ad4c68bbcecb495b79e1db77e92f8e4d8127e28f36b9441bf9a78667fb1f0cb184269f194c95401b5c8532a37e8144d021abb88e62be67aaae8075
- SSDEEP 98304:rAZYlXD2UfvsCIatXv2Vtb+71Oo2SUktJK2xdDgvn2bTyMLEfTXD:rtZD3cSm5SrtQ2xdD9yMYfTX
- TLSH T1C3474A67F9555194E1EEC033C67252267BA23C89073423D72B90F762AF33BE05A7A358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
UPX dump on OEP (original entry point)