General
- Target 2026-08-09_c53da6b3fdab0fbe38744a91f60e56b3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- Sample260809-tf782shn8s
- SHA256 f43040adca0655ed4f5a19497e522e7543738622913b36dbd62ffb6fc70dbd14
- MD5 c53da6b3fdab0fbe38744a91f60e56b3
- SHA1 f7b0a51ccecce761e2e89bbbed9bdfb9eabaaf1e
- SHA512 b01bbe2dfafbbf79654fbd95bfdf06692f1a7743249edaedefb2ff3de19c261068dd5d3bf56e98a4ca9c4f49b8ddb06f352e930c4b926ebf7d80a899b51786b8
- SSDEEP 98304:7dyNUz+xJyv28vxMu9yP+/AVD0JLD/ORcVrqOo9ES:7wyz8PWg0lDbTS
- TLSH T136F65B47E9A515E5C1AEC131CA669613BF713C994F3023D36B60B6382F32BD0AEB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_c53da6b3fdab0fbe38744a91f60e56b3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_c53da6b3fdab0fbe38744a91f60e56b3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_c53da6b3fdab0fbe38744a91f60e56b3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- SHA256 f43040adca0655ed4f5a19497e522e7543738622913b36dbd62ffb6fc70dbd14
- MD5 c53da6b3fdab0fbe38744a91f60e56b3
- SHA1 f7b0a51ccecce761e2e89bbbed9bdfb9eabaaf1e
- SHA512 b01bbe2dfafbbf79654fbd95bfdf06692f1a7743249edaedefb2ff3de19c261068dd5d3bf56e98a4ca9c4f49b8ddb06f352e930c4b926ebf7d80a899b51786b8
- SSDEEP 98304:7dyNUz+xJyv28vxMu9yP+/AVD0JLD/ORcVrqOo9ES:7wyz8PWg0lDbTS
- TLSH T136F65B47E9A515E5C1AEC131CA669613BF713C994F3023D36B60B6382F32BD0AEB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1