General
- Target 2026-08-09_a0af65bade61dfd6d6471588744ffdaa_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.7MB
- Sample260809-tq6szabc79
- SHA256 0368ddeb6bf0be9a3304cd329012ac21df005ea8805ab6b07b0836f603e60e80
- MD5 a0af65bade61dfd6d6471588744ffdaa
- SHA1 d01ff4b3ed450a5ca4d634dc834b14a9df0d69ea
- SHA512 9076e103d5e726c8447d9204af4ba7c675f7fecb5c1d9d39e4d90f0456c8d32b8c9eb44cc5fc0f2ccf2ac35d0624d725790c05519b278c9812ecd438172e2fc9
- SSDEEP 98304:b91TzcZzHDxKOfi9VIIdqx2NumvBh8huTjEg:bfINALOIdahg
- TLSH T1B6B64943ECA501E9C1ADC575CA2A9616BB713C894B30A3DB5B50F7252F37BD0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_a0af65bade61dfd6d6471588744ffdaa_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_a0af65bade61dfd6d6471588744ffdaa_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_a0af65bade61dfd6d6471588744ffdaa_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.7MB
- SHA256 0368ddeb6bf0be9a3304cd329012ac21df005ea8805ab6b07b0836f603e60e80
- MD5 a0af65bade61dfd6d6471588744ffdaa
- SHA1 d01ff4b3ed450a5ca4d634dc834b14a9df0d69ea
- SHA512 9076e103d5e726c8447d9204af4ba7c675f7fecb5c1d9d39e4d90f0456c8d32b8c9eb44cc5fc0f2ccf2ac35d0624d725790c05519b278c9812ecd438172e2fc9
- SSDEEP 98304:b91TzcZzHDxKOfi9VIIdqx2NumvBh8huTjEg:bfINALOIdahg
- TLSH T1B6B64943ECA501E9C1ADC575CA2A9616BB713C894B30A3DB5B50F7252F37BD0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE