General
- Target 2026-08-08_e217f01d0882ebe54f97d30048b1d0e4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- Sample260808-2mb37awarh
- SHA256 9c86c19ec70ebdcce6fda92c6e8c728252420ce6a0ef4502d4d7bc03ba250bcd
- MD5 e217f01d0882ebe54f97d30048b1d0e4
- SHA1 db4d0dcd5eac0026fdc8ac7179080443704fb1a5
- SHA512 8b98fbfbe9037c244be08a4d516e72ace55107a7e079e5389fca07a0f936bbb272a7f87ef8aaf433897e11f2a50a62fb3404bb8957cbeb7c23e8a4edc4334eeb
- SSDEEP 98304:dkASnUA/kpS4i1b43CeaFOumvBh8huTgE:doUA/kpT2E3CFY
- TLSH T1F2763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_e217f01d0882ebe54f97d30048b1d0e4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_e217f01d0882ebe54f97d30048b1d0e4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e217f01d0882ebe54f97d30048b1d0e4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- SHA256 9c86c19ec70ebdcce6fda92c6e8c728252420ce6a0ef4502d4d7bc03ba250bcd
- MD5 e217f01d0882ebe54f97d30048b1d0e4
- SHA1 db4d0dcd5eac0026fdc8ac7179080443704fb1a5
- SHA512 8b98fbfbe9037c244be08a4d516e72ace55107a7e079e5389fca07a0f936bbb272a7f87ef8aaf433897e11f2a50a62fb3404bb8957cbeb7c23e8a4edc4334eeb
- SSDEEP 98304:dkASnUA/kpS4i1b43CeaFOumvBh8huTgE:doUA/kpT2E3CFY
- TLSH T1F2763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE