General
- Target 2026-08-08_4b7a9f5bd6c94a630dcf054f2996d209_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- Sample260808-xlrp2ashpc
- SHA256 d637bb6ddbd93179fbdc200b2e642ae00897c83754f0871b17875174ca161f44
- MD5 4b7a9f5bd6c94a630dcf054f2996d209
- SHA1 adf305b15ee294e1a73b05489a2172bc9d747277
- SHA512 fbcd2a7180953233068a274cc8a02ac23336429c09159e7cd535879d18356a199c12000d7519f4955678bc7684d79400645d613ec9c8f7157cf838a39a660f3e
- SSDEEP 98304:hktiYkwt4pdBWYnf3CeaFOumvBh8huTAE:hbdwt4pjnf3CFE
- TLSH T1F8763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_4b7a9f5bd6c94a630dcf054f2996d209_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_4b7a9f5bd6c94a630dcf054f2996d209_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_4b7a9f5bd6c94a630dcf054f2996d209_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- SHA256 d637bb6ddbd93179fbdc200b2e642ae00897c83754f0871b17875174ca161f44
- MD5 4b7a9f5bd6c94a630dcf054f2996d209
- SHA1 adf305b15ee294e1a73b05489a2172bc9d747277
- SHA512 fbcd2a7180953233068a274cc8a02ac23336429c09159e7cd535879d18356a199c12000d7519f4955678bc7684d79400645d613ec9c8f7157cf838a39a660f3e
- SSDEEP 98304:hktiYkwt4pdBWYnf3CeaFOumvBh8huTAE:hbdwt4pjnf3CFE
- TLSH T1F8763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE