General
- Target 2026-08-08_2fd7ad86bf2d6b5cfdffdcbc99909514_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- Sample260808-ee9m6abe99
- SHA256 ce42d9e12db4f2f4d29d565919c6ce03b711769f83ce12756b8838ae195f1db8
- MD5 2fd7ad86bf2d6b5cfdffdcbc99909514
- SHA1 db19b144fe63a26f808438ce400af2f0fe64a3fe
- SHA512 ceba4f2f36828d1ae4a510f58c7f89bbd2a214bd604b3fcc7b5c17b7aabd81fdb0346fb9db452af7bd957ae2f26ddcb44296c24d470ea59247f75ede998df6d5
- SSDEEP 98304:Ok7SYUKn9pJ4mJhJ3CeaFOumvBh8huTXE:OJtKn9pOCz3CFp
- TLSH T1D3763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_2fd7ad86bf2d6b5cfdffdcbc99909514_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_2fd7ad86bf2d6b5cfdffdcbc99909514_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_2fd7ad86bf2d6b5cfdffdcbc99909514_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- SHA256 ce42d9e12db4f2f4d29d565919c6ce03b711769f83ce12756b8838ae195f1db8
- MD5 2fd7ad86bf2d6b5cfdffdcbc99909514
- SHA1 db19b144fe63a26f808438ce400af2f0fe64a3fe
- SHA512 ceba4f2f36828d1ae4a510f58c7f89bbd2a214bd604b3fcc7b5c17b7aabd81fdb0346fb9db452af7bd957ae2f26ddcb44296c24d470ea59247f75ede998df6d5
- SSDEEP 98304:Ok7SYUKn9pJ4mJhJ3CeaFOumvBh8huTXE:OJtKn9pOCz3CFp
- TLSH T1D3763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE