f22079ff1c6f0f53bdf6d11d89ef7b2389b4a4df5a5809e0d5dbcf5d5bde59d1 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-06...ch.exe

windows10-2004-x64

7

2026-08-06...ch.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_6b6f29504c063d0d42a20c00341578f1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
Size 9.7MB
Sample260806-21tkdsbr8w
SHA256 f22079ff1c6f0f53bdf6d11d89ef7b2389b4a4df5a5809e0d5dbcf5d5bde59d1
MD5 6b6f29504c063d0d42a20c00341578f1
SHA1 00671f6d82c68356fb89c737257e651435a4bd3a
SHA512 b75603dbb7b6a3f08b229907747a81a182694d512469a840250ee9af71e9546cbe2a6a76a3eb1151c0d67d6c81cd3cdc90c70d86e0ea997a6c52839ea7495c2e
SSDEEP 98304:Sqp018ksWBmtbAU/nEK3GpFWL6Tn8ovr209z/8u3RgQtbLQGQXQkxdK:S7WkkeUMjptTn3r20BUgRltbPMK
TLSH
T1A0A66B43EC9525E9C19DA231CAB692537B717C490B3223D72B90F2387E72BD0AE79354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution persistence privilege_escalation spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-06_6b6f29504c063d0d42a20c00341578f1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

discovery execution persistence privilege_escalation spyware stealer

Behavioral task

behavioral2

Sample

2026-08-06_6b6f29504c063d0d42a20c00341578f1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

discovery execution persistence privilege_escalation spyware stealer

Malware Config

Targets

- Target
  2026-08-06_6b6f29504c063d0d42a20c00341578f1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 9.7MB
- SHA256 f22079ff1c6f0f53bdf6d11d89ef7b2389b4a4df5a5809e0d5dbcf5d5bde59d1
- MD5 6b6f29504c063d0d42a20c00341578f1
- SHA1 00671f6d82c68356fb89c737257e651435a4bd3a
- SHA512 b75603dbb7b6a3f08b229907747a81a182694d512469a840250ee9af71e9546cbe2a6a76a3eb1151c0d67d6c81cd3cdc90c70d86e0ea997a6c52839ea7495c2e
- SSDEEP 98304:Sqp018ksWBmtbAU/nEK3GpFWL6Tn8ovr209z/8u3RgQtbLQGQXQkxdK:S7WkkeUMjptTn3r20BUgRltbPMK
- TLSH
  T1A0A66B43EC9525E9C19DA231CAB692537B717C490B3223D72B90F2387E72BD0AE79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence privilege_escalation spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Network Configuration Discovery

Wi-Fi Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistenceprivilege_escalationspywarestealer

behavioral2

discoveryexecutionpersistenceprivilege_escalationspywarestealer

© 2018-2026

Terms | Privacy