General
- Target 2026-08-07_13a0f31e9b3cb9aab597810481e1f4d0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- Sample260808-cafs6sfp5v
- SHA256 cfb87c19ef010e692dee542c653aeaae08f318273bf4f59a30e70d8c404cc296
- MD5 13a0f31e9b3cb9aab597810481e1f4d0
- SHA1 c6646eb2c19f1016184c856952a3db7bb5cf3910
- SHA512 c9ca2187bdd5dd45044f2923ceb9d74fbec273cf264ff0f31d15661275fbd4892f9c4836d2276fa55b23a01767b113d5804313132c9cccc08c8276d909c8f309
- SSDEEP 49152:+p6zrwe2HqNyQNqM7Pn7xMm8Hn4h75Qp6krsIEs7c6rWMtmUX1/V/g3Cz5a5agK/:+pAn4oQjpnvrOx3CeaF0umvBh8huTtE
- TLSH T1FA763907ECA554E9C0BE813189739562BB717C495B3123D32B50F6382F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_13a0f31e9b3cb9aab597810481e1f4d0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_13a0f31e9b3cb9aab597810481e1f4d0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_13a0f31e9b3cb9aab597810481e1f4d0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- SHA256 cfb87c19ef010e692dee542c653aeaae08f318273bf4f59a30e70d8c404cc296
- MD5 13a0f31e9b3cb9aab597810481e1f4d0
- SHA1 c6646eb2c19f1016184c856952a3db7bb5cf3910
- SHA512 c9ca2187bdd5dd45044f2923ceb9d74fbec273cf264ff0f31d15661275fbd4892f9c4836d2276fa55b23a01767b113d5804313132c9cccc08c8276d909c8f309
- SSDEEP 49152:+p6zrwe2HqNyQNqM7Pn7xMm8Hn4h75Qp6krsIEs7c6rWMtmUX1/V/g3Cz5a5agK/:+pAn4oQjpnvrOx3CeaF0umvBh8huTtE
- TLSH T1FA763907ECA554E9C0BE813189739562BB717C495B3123D32B50F6382F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE