General
- Target 2026-08-06_92d2a54920b1378f301f1c89b0f083b0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 21.2MB
- Sample260806-brrfka1aja
- SHA256 5d718b4145c6989dc82757297ee7be387e9b997ad599803bde0e0102b25dff0e
- MD5 92d2a54920b1378f301f1c89b0f083b0
- SHA1 3b41653f846872475a6f73255a22d39effd76203
- SHA512 689b882dcc866e6645c80eaddacc757ae137ebec4895a7b0b5451238f296216e79770e7aa0fb73eaa693ead5117cbcf3d1ca34e8b0221e7cea8b75da634328b7
- SSDEEP 393216:SxaSVxCJIUt7EtkSnkKl+6eqbYV0yIFRj:SDMQqQkC+6eqbOIXj
- TLSH T1BA279D43E87551A8E0AD9276C6679613BBB53C854B3163C37F90FA342F32BD0A6B5708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_92d2a54920b1378f301f1c89b0f083b0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_92d2a54920b1378f301f1c89b0f083b0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_92d2a54920b1378f301f1c89b0f083b0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 21.2MB
- SHA256 5d718b4145c6989dc82757297ee7be387e9b997ad599803bde0e0102b25dff0e
- MD5 92d2a54920b1378f301f1c89b0f083b0
- SHA1 3b41653f846872475a6f73255a22d39effd76203
- SHA512 689b882dcc866e6645c80eaddacc757ae137ebec4895a7b0b5451238f296216e79770e7aa0fb73eaa693ead5117cbcf3d1ca34e8b0221e7cea8b75da634328b7
- SSDEEP 393216:SxaSVxCJIUt7EtkSnkKl+6eqbYV0yIFRj:SDMQqQkC+6eqbOIXj
- TLSH T1BA279D43E87551A8E0AD9276C6679613BBB53C854B3163C37F90FA342F32BD0A6B5708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
UPX dump on OEP (original entry point)