General
- Target 2026-08-09_325bfe1766e077d088b50516e0f031ce_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- Sample260809-vjxr6ascqe
- SHA256 523f48a0196e6e041b025955e917a2dbf18106de14d7fd168f4d997065d9cbe5
- MD5 325bfe1766e077d088b50516e0f031ce
- SHA1 2a6b7f50c8bbd6677a8c6cf9242280a4986aceb6
- SHA512 a1973ec026134cfa2a1aab1e75f77ff46ac266202af450b4f825c3ee535732bf6d427da2afa3019786f5e8636667f692302f436a10178c875c0ede483e86b1dd
- SSDEEP 98304:4PPmJAVjmWwo6OtdvmJXVz2rNxvJmzvm+yJED/OcIiOeU/+2EH9:42+4+wViNOzvm+ySDTOehH
- TLSH T115F64A47E8A515D9C0AED175CA66A113BB713C894F3023D36BA0F6287F32BD09EB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_325bfe1766e077d088b50516e0f031ce_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_325bfe1766e077d088b50516e0f031ce_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_325bfe1766e077d088b50516e0f031ce_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- SHA256 523f48a0196e6e041b025955e917a2dbf18106de14d7fd168f4d997065d9cbe5
- MD5 325bfe1766e077d088b50516e0f031ce
- SHA1 2a6b7f50c8bbd6677a8c6cf9242280a4986aceb6
- SHA512 a1973ec026134cfa2a1aab1e75f77ff46ac266202af450b4f825c3ee535732bf6d427da2afa3019786f5e8636667f692302f436a10178c875c0ede483e86b1dd
- SSDEEP 98304:4PPmJAVjmWwo6OtdvmJXVz2rNxvJmzvm+yJED/OcIiOeU/+2EH9:42+4+wViNOzvm+ySDTOehH
- TLSH T115F64A47E8A515D9C0AED175CA66A113BB713C894F3023D36BA0F6287F32BD09EB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1