General
- Target 2026-08-08_b4e070b32b6208c9fb7ff8ad7b0da541_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- Sample260809-ael5mswgrf
- SHA256 a0609eb3ed728951cbc0941eb36944562e797d44020d90b649f093d5088ee7c9
- MD5 b4e070b32b6208c9fb7ff8ad7b0da541
- SHA1 ed0a06e5719b2ea688697a94c12e016bb89f32c2
- SHA512 7ad89c45b1f6012ad4cbf1f5c233258b8f92f77b52ccab3a6b98212892a1decc7e96025eb43323200a4fd000688d72c6d0f489ef26d959a3335577e0c9658df5
- SSDEEP 98304:jkLiYEV0olLm1cft3CeaFOumvBh8huTRE:j59V0olKS13CFv
- TLSH T189763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_b4e070b32b6208c9fb7ff8ad7b0da541_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_b4e070b32b6208c9fb7ff8ad7b0da541_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_b4e070b32b6208c9fb7ff8ad7b0da541_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- SHA256 a0609eb3ed728951cbc0941eb36944562e797d44020d90b649f093d5088ee7c9
- MD5 b4e070b32b6208c9fb7ff8ad7b0da541
- SHA1 ed0a06e5719b2ea688697a94c12e016bb89f32c2
- SHA512 7ad89c45b1f6012ad4cbf1f5c233258b8f92f77b52ccab3a6b98212892a1decc7e96025eb43323200a4fd000688d72c6d0f489ef26d959a3335577e0c9658df5
- SSDEEP 98304:jkLiYEV0olLm1cft3CeaFOumvBh8huTRE:j59V0olKS13CFv
- TLSH T189763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE