General
- Target 2026-08-08_95d4e82e857e9965665d4d943844236d_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- Sample260808-px85fsxbmg
- SHA256 b72bfbe52cfc7b155fb6381b10392a93db52269cd8838b913f5ce2547d108e15
- MD5 95d4e82e857e9965665d4d943844236d
- SHA1 fc069fd8644c5809f13dd963cbc31dd2c7c27798
- SHA512 ab8a9a2915db41a71e07fbf9d1fb6bcc47a498c8b4734a228e9be38c6f5f30f41b1a400c2fc67c4ce58ced1da284f9412b248b9b6f8f66a3447c8ff6de52865a
- SSDEEP 98304:Yk7SYUqn9pJ4mJx33CeaFOumvBh8huTXE:YJtqn9pOCF3CFp
- TLSH T1A4763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_95d4e82e857e9965665d4d943844236d_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_95d4e82e857e9965665d4d943844236d_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_95d4e82e857e9965665d4d943844236d_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- SHA256 b72bfbe52cfc7b155fb6381b10392a93db52269cd8838b913f5ce2547d108e15
- MD5 95d4e82e857e9965665d4d943844236d
- SHA1 fc069fd8644c5809f13dd963cbc31dd2c7c27798
- SHA512 ab8a9a2915db41a71e07fbf9d1fb6bcc47a498c8b4734a228e9be38c6f5f30f41b1a400c2fc67c4ce58ced1da284f9412b248b9b6f8f66a3447c8ff6de52865a
- SSDEEP 98304:Yk7SYUqn9pJ4mJx33CeaFOumvBh8huTXE:YJtqn9pOCF3CFp
- TLSH T1A4763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE