General
- Target 2026-08-07_c6b37f527f0fc37461a257d4a83ffbd8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- Sample260807-ssh91sgj2v
- SHA256 5b6727e3cfb3cd9ec89223dae0a68fbc880cc3a3434ae989b9b7c1a276e088d1
- MD5 c6b37f527f0fc37461a257d4a83ffbd8
- SHA1 c77a7979130d2623583218da62dc3df59ca04757
- SHA512 9ed1a8367d4573f5e8b85834fa2a8a61aeac2bc0d55c98b8937c7c8aed0545a7b3a013c30810f2a3b6b9f7a9c825aaae65f58c7b1aefc38f7a4d3ef0cea79761
- SSDEEP 98304:Lk7SYUKn9pJ4mJhJ3CeaFOumvBh8huTXE:LJtKn9pOC33CFp
- TLSH T13A763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_c6b37f527f0fc37461a257d4a83ffbd8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_c6b37f527f0fc37461a257d4a83ffbd8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_c6b37f527f0fc37461a257d4a83ffbd8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- SHA256 5b6727e3cfb3cd9ec89223dae0a68fbc880cc3a3434ae989b9b7c1a276e088d1
- MD5 c6b37f527f0fc37461a257d4a83ffbd8
- SHA1 c77a7979130d2623583218da62dc3df59ca04757
- SHA512 9ed1a8367d4573f5e8b85834fa2a8a61aeac2bc0d55c98b8937c7c8aed0545a7b3a013c30810f2a3b6b9f7a9c825aaae65f58c7b1aefc38f7a4d3ef0cea79761
- SSDEEP 98304:Lk7SYUKn9pJ4mJhJ3CeaFOumvBh8huTXE:LJtKn9pOC33CFp
- TLSH T13A763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE