General
- Target 2026-08-09_00d3a5c4c1801b7c8930f73bd9009574_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.1MB
- Sample260809-vvpkxsar2v
- SHA256 0d39d0c25e4e98bf79220c9fad2fa8dacfbb17d5a94ec2341d180ce60a1d6191
- MD5 00d3a5c4c1801b7c8930f73bd9009574
- SHA1 f15e33f052637bd240b36eec2645b0d7f142d5d9
- SHA512 1a28994cdb95dac5f40488cd70f1ace7982781c938983bfc55ccc8036225dc9ed09ee20b52dcb1f97cc217ce3c22fe08488ff43e6ca8c885c983c8aec70bc5be
- SSDEEP 49152:WcWAGYE9ePzz2DIeCyRCvNOm5QgFimq7V1nDB8idUPYWCjYpnq0uVLKmalBtKVKZ:Wc9XMBPGF9AiBmxumvBh8huTkE
- TLSH T14D763907FCA618E8C0AD91358A6296537F617C491B3163D72B60F6382F77BD06EBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_00d3a5c4c1801b7c8930f73bd9009574_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_00d3a5c4c1801b7c8930f73bd9009574_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_00d3a5c4c1801b7c8930f73bd9009574_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.1MB
- SHA256 0d39d0c25e4e98bf79220c9fad2fa8dacfbb17d5a94ec2341d180ce60a1d6191
- MD5 00d3a5c4c1801b7c8930f73bd9009574
- SHA1 f15e33f052637bd240b36eec2645b0d7f142d5d9
- SHA512 1a28994cdb95dac5f40488cd70f1ace7982781c938983bfc55ccc8036225dc9ed09ee20b52dcb1f97cc217ce3c22fe08488ff43e6ca8c885c983c8aec70bc5be
- SSDEEP 49152:WcWAGYE9ePzz2DIeCyRCvNOm5QgFimq7V1nDB8idUPYWCjYpnq0uVLKmalBtKVKZ:Wc9XMBPGF9AiBmxumvBh8huTkE
- TLSH T14D763907FCA618E8C0AD91358A6296537F617C491B3163D72B60F6382F77BD06EBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE