General
- Target 2026-08-09_bff1b4e82fe65bd36047ec22d856ca97_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- Sample260809-thn8ys1emf
- SHA256 782993c5ddf04b0d1a7aa9f31bb725770b7c62d7021f6826381bf8ade578a3a7
- MD5 bff1b4e82fe65bd36047ec22d856ca97
- SHA1 b00c6ce6d10a9292cfe65a787707cf2cd68c4def
- SHA512 cd5174d796e8d24066ed4743daa053205b36741f0a65fea39d505c666506c3f0f9f219a3d27559889d41bdec181a6cad23e695e2940b6dbb75149d39ab324076
- SSDEEP 98304:6HSFBW3kdxL5geu3AugxunvZw+76LJ5D/OAEZdjoKKE7:6eYX1gknW+76LPDY7
- TLSH T1A4F64A47F8A515D6C0AED175CA669113BB727C894F3023D36B60F6282F32BD0AEB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_bff1b4e82fe65bd36047ec22d856ca97_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_bff1b4e82fe65bd36047ec22d856ca97_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_bff1b4e82fe65bd36047ec22d856ca97_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- SHA256 782993c5ddf04b0d1a7aa9f31bb725770b7c62d7021f6826381bf8ade578a3a7
- MD5 bff1b4e82fe65bd36047ec22d856ca97
- SHA1 b00c6ce6d10a9292cfe65a787707cf2cd68c4def
- SHA512 cd5174d796e8d24066ed4743daa053205b36741f0a65fea39d505c666506c3f0f9f219a3d27559889d41bdec181a6cad23e695e2940b6dbb75149d39ab324076
- SSDEEP 98304:6HSFBW3kdxL5geu3AugxunvZw+76LJ5D/OAEZdjoKKE7:6eYX1gknW+76LPDY7
- TLSH T1A4F64A47F8A515D6C0AED175CA669113BB727C894F3023D36B60F6282F32BD0AEB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1