General
- Target 2026-08-09_b9b80a5587ece216cc5db0fce2e3f95a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- Sample260809-q2v9ts11g1
- SHA256 3b1527800c70d7f0483f517f7c45fd3e68c0f1d528d247886139133117264ba3
- MD5 b9b80a5587ece216cc5db0fce2e3f95a
- SHA1 f38f43a8fed3d49cee2f26d2e3b6b243b3cd9a11
- SHA512 48f01931038766352ac1f946db56a98f0d77cbde19c5968c1ed82bec8244eae80eb8870b0ca682c5a6efb8654d8efe8c19b0ea7cf7d508c5d605f71d4bfe6190
- SSDEEP 98304:ZdEmAFYx1Z77vo5fncJqCXtdAH3HJA/DGV03hEgu:Zp46KaqCdGH3HJEDZig
- TLSH T133F64947E8A511E5C1EED535CA7696237F713C894B3023D32B60BA642F36BD0AEB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_b9b80a5587ece216cc5db0fce2e3f95a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b9b80a5587ece216cc5db0fce2e3f95a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b9b80a5587ece216cc5db0fce2e3f95a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- SHA256 3b1527800c70d7f0483f517f7c45fd3e68c0f1d528d247886139133117264ba3
- MD5 b9b80a5587ece216cc5db0fce2e3f95a
- SHA1 f38f43a8fed3d49cee2f26d2e3b6b243b3cd9a11
- SHA512 48f01931038766352ac1f946db56a98f0d77cbde19c5968c1ed82bec8244eae80eb8870b0ca682c5a6efb8654d8efe8c19b0ea7cf7d508c5d605f71d4bfe6190
- SSDEEP 98304:ZdEmAFYx1Z77vo5fncJqCXtdAH3HJA/DGV03hEgu:Zp46KaqCdGH3HJEDZig
- TLSH T133F64947E8A511E5C1EED535CA7696237F713C894B3023D32B60BA642F36BD0AEB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.