General
- Target 2026-08-09_ec5d05b4bcc4337b26a8b5d2d8bf190b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.2MB
- Sample260809-s7q86s1clf
- SHA256 fb5881e6d0da1ebcc31986709e0c93180bc95198461a39ef1adde43f7938345b
- MD5 ec5d05b4bcc4337b26a8b5d2d8bf190b
- SHA1 4407752db2672fba7532069bb2db8968dc88ac0f
- SHA512 cbac52b191ac8c24028a449b4f391343ae62775ea83d4773ba740ebbc8e0b783b3afc04c07ea0f46cef9c69c2f1a45e1e90bef927373b4170d9c30a2f2556d54
- SSDEEP 49152:zVir57pOX4QcBGz+q7fgMgZ8SCU0vDugi8TfK78a2y0IYW9mMcnDuVYymalBRKVQ:zV2xYmCNZ3vsEqBStumvBh8huT/E
- TLSH T1E7762907FCA515E8C0AE95358A7292137B617C884B3167D72B90F6386F77BD06EBA340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_ec5d05b4bcc4337b26a8b5d2d8bf190b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_ec5d05b4bcc4337b26a8b5d2d8bf190b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_ec5d05b4bcc4337b26a8b5d2d8bf190b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.2MB
- SHA256 fb5881e6d0da1ebcc31986709e0c93180bc95198461a39ef1adde43f7938345b
- MD5 ec5d05b4bcc4337b26a8b5d2d8bf190b
- SHA1 4407752db2672fba7532069bb2db8968dc88ac0f
- SHA512 cbac52b191ac8c24028a449b4f391343ae62775ea83d4773ba740ebbc8e0b783b3afc04c07ea0f46cef9c69c2f1a45e1e90bef927373b4170d9c30a2f2556d54
- SSDEEP 49152:zVir57pOX4QcBGz+q7fgMgZ8SCU0vDugi8TfK78a2y0IYW9mMcnDuVYymalBRKVQ:zV2xYmCNZ3vsEqBStumvBh8huT/E
- TLSH T1E7762907FCA515E8C0AE95358A7292137B617C884B3167D72B90F6386F77BD06EBA340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE