General
- Target 2026-08-08_31ee37c8a8ab10994e0701fef95d3e31_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.7MB
- Sample260808-gkv33avtbs
- SHA256 0bf2d1d38d7497df089404c2ee4b3ace9dc92cc0916e438c380b8bc9fa8c397b
- MD5 31ee37c8a8ab10994e0701fef95d3e31
- SHA1 cae27c06fc1a079fd94cad01e3c2f349862a692e
- SHA512 7f1fc0afe174f31cdf7f9488bb8af79ff5633a720e1af7980e8efabfc299a1c051606a76fb00309fac1bdde793abb08c328a26b7213b5fdb0ce063ca399d3870
- SSDEEP 98304:qd4/B+2fX6Amh7elDIgo+d6Bqxc0umvBh8huTME:qw82PiicQ6BaH
- TLSH T159B63847EDA501D9C1AEC575CA269616BB713C894F30A3D72B90F6242F37BD0AEB9310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_31ee37c8a8ab10994e0701fef95d3e31_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_31ee37c8a8ab10994e0701fef95d3e31_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_31ee37c8a8ab10994e0701fef95d3e31_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.7MB
- SHA256 0bf2d1d38d7497df089404c2ee4b3ace9dc92cc0916e438c380b8bc9fa8c397b
- MD5 31ee37c8a8ab10994e0701fef95d3e31
- SHA1 cae27c06fc1a079fd94cad01e3c2f349862a692e
- SHA512 7f1fc0afe174f31cdf7f9488bb8af79ff5633a720e1af7980e8efabfc299a1c051606a76fb00309fac1bdde793abb08c328a26b7213b5fdb0ce063ca399d3870
- SSDEEP 98304:qd4/B+2fX6Amh7elDIgo+d6Bqxc0umvBh8huTME:qw82PiicQ6BaH
- TLSH T159B63847EDA501D9C1AEC575CA269616BB713C894F30A3D72B90F6242F37BD0AEB9310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE