General
- Target 2026-08-09_e1830e99aa18b5516b2dabbcd7e58d85_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.3MB
- Sample260809-taaqlahm6v
- SHA256 1bbdcd9ccf700a144012fb91bfd12ee6c1fb93fedba5fa27b7ca731849ec4845
- MD5 e1830e99aa18b5516b2dabbcd7e58d85
- SHA1 156fd109980fa559d7c5afdb53be2a0a3ad5dc31
- SHA512 39735f38b9a4eeb39057f90a21c362d43922ff669331ea24465ff2fde25bdfff87ee0f59fed9e1173506c0d5c0445654f2fcea0388fe967a396085dbd79def1a
- SSDEEP 98304:pzknz/NQTrHcsTDB1lEo3UZx9Nnn7W7j7Bi:p+LNHs/nWQUZx95S7Y
- TLSH T1FD768D03EC6954E9D1AED13189769163BB717C881B2123D72B50F6387FB6BE0ADB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_e1830e99aa18b5516b2dabbcd7e58d85_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_e1830e99aa18b5516b2dabbcd7e58d85_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_e1830e99aa18b5516b2dabbcd7e58d85_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.3MB
- SHA256 1bbdcd9ccf700a144012fb91bfd12ee6c1fb93fedba5fa27b7ca731849ec4845
- MD5 e1830e99aa18b5516b2dabbcd7e58d85
- SHA1 156fd109980fa559d7c5afdb53be2a0a3ad5dc31
- SHA512 39735f38b9a4eeb39057f90a21c362d43922ff669331ea24465ff2fde25bdfff87ee0f59fed9e1173506c0d5c0445654f2fcea0388fe967a396085dbd79def1a
- SSDEEP 98304:pzknz/NQTrHcsTDB1lEo3UZx9Nnn7W7j7Bi:p+LNHs/nWQUZx95S7Y
- TLSH T1FD768D03EC6954E9D1AED13189769163BB717C881B2123D72B50F6387FB6BE0ADB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.