General
- Target 2026-08-09_842306bd34926e1a9a8c1277ec588c87_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.1MB
- Sample260809-l23axsdk91
- SHA256 c22e90576df416be93bd282fef356a2d6e25958657a22151781e207e5d5fb97e
- MD5 842306bd34926e1a9a8c1277ec588c87
- SHA1 6b4ac475b9cd6dd62d51b82cd9384bc1e77d8fd7
- SHA512 b81fa3d079083c871a832247a023b77811e72c91b0b109a92237e2b3f7aad771b6bfbc103bc63312e37701f8e7d69286a2b4c1187e7426a1549a40a27be197df
- SSDEEP 49152:QcWAGYE9ePzz2DIeCyRCvNOm5QgFimq7V1nDB8idUPYWCjYpnq0uVCKmalBtKVK0:Qc9XMBPGF9ALBmxumvBh8huTkE
- TLSH T144763907FCA618E8C0AD91358A6296537F617C491B3163D72B60F6382F77BD06EBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_842306bd34926e1a9a8c1277ec588c87_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_842306bd34926e1a9a8c1277ec588c87_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_842306bd34926e1a9a8c1277ec588c87_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.1MB
- SHA256 c22e90576df416be93bd282fef356a2d6e25958657a22151781e207e5d5fb97e
- MD5 842306bd34926e1a9a8c1277ec588c87
- SHA1 6b4ac475b9cd6dd62d51b82cd9384bc1e77d8fd7
- SHA512 b81fa3d079083c871a832247a023b77811e72c91b0b109a92237e2b3f7aad771b6bfbc103bc63312e37701f8e7d69286a2b4c1187e7426a1549a40a27be197df
- SSDEEP 49152:QcWAGYE9ePzz2DIeCyRCvNOm5QgFimq7V1nDB8idUPYWCjYpnq0uVCKmalBtKVK0:Qc9XMBPGF9ALBmxumvBh8huTkE
- TLSH T144763907FCA618E8C0AD91358A6296537F617C491B3163D72B60F6382F77BD06EBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE