General
- Target 2026-08-09_6da98d6b2d7e882ccadc4840ae740aed_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.0MB
- Sample260809-t5k5tabd63
- SHA256 88e4e3b4f4e4fd06f41551160f3c4ddbd5437aabd768fc08292118f42eabadc6
- MD5 6da98d6b2d7e882ccadc4840ae740aed
- SHA1 ac523c312bfedd5a4aea69e6eaff3073744f3b63
- SHA512 cbb35401cd13e5bf9f9d331eff387ccb875584dd1288eaee027e75111f6aeff1006af8c254197fbc2807cd1690d458eea3bca466761db2e391d4368b4116be86
- SSDEEP 98304:jwnbu39ftOZCJUQniMEYow1wdumvBh8huTQE:jwoPMGiRi1wf
- TLSH T119C62847E8A555D9C0AEC135CA369526BBA03C894B3063D32F50FA242F77BD0AEBD744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_6da98d6b2d7e882ccadc4840ae740aed_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_6da98d6b2d7e882ccadc4840ae740aed_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6da98d6b2d7e882ccadc4840ae740aed_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.0MB
- SHA256 88e4e3b4f4e4fd06f41551160f3c4ddbd5437aabd768fc08292118f42eabadc6
- MD5 6da98d6b2d7e882ccadc4840ae740aed
- SHA1 ac523c312bfedd5a4aea69e6eaff3073744f3b63
- SHA512 cbb35401cd13e5bf9f9d331eff387ccb875584dd1288eaee027e75111f6aeff1006af8c254197fbc2807cd1690d458eea3bca466761db2e391d4368b4116be86
- SSDEEP 98304:jwnbu39ftOZCJUQniMEYow1wdumvBh8huTQE:jwoPMGiRi1wf
- TLSH T119C62847E8A555D9C0AEC135CA369526BBA03C894B3063D32F50FA242F77BD0AEBD744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
-
Executes dropped EXE