General
- Target 2026-08-09_d3d2cffd99c7b65febc08570f1f1e120_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- Sample260809-wsf2fabg52
- SHA256 28cde060c7b34c7dd144521094a8c219beb44338fd4f334781cc6f2ed56b4857
- MD5 d3d2cffd99c7b65febc08570f1f1e120
- SHA1 a6aaca3965cb85a0ef11b1b54c7beb02697ac657
- SHA512 3b0afbeb370b7913e7a1ef9e43328c490ff66b4e9e453f5fed5a99d9e12a8e512530d3b55c08b55114569e9f560e0948c861522d77956fa878ad6f85b14348d5
- SSDEEP 98304:HPPmJAVjmWwo6OtdvmJXVz2rNxvJmzvm+KJED/OuIiOelmEH9:H2+4+wViNOzvm+KSDFOelH
- TLSH T1B0F64A47E8A515D9C0AED175CA66A113BB713C894F3023D36BA0F6287F32BD09EB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_d3d2cffd99c7b65febc08570f1f1e120_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_d3d2cffd99c7b65febc08570f1f1e120_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_d3d2cffd99c7b65febc08570f1f1e120_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- SHA256 28cde060c7b34c7dd144521094a8c219beb44338fd4f334781cc6f2ed56b4857
- MD5 d3d2cffd99c7b65febc08570f1f1e120
- SHA1 a6aaca3965cb85a0ef11b1b54c7beb02697ac657
- SHA512 3b0afbeb370b7913e7a1ef9e43328c490ff66b4e9e453f5fed5a99d9e12a8e512530d3b55c08b55114569e9f560e0948c861522d77956fa878ad6f85b14348d5
- SSDEEP 98304:HPPmJAVjmWwo6OtdvmJXVz2rNxvJmzvm+KJED/OuIiOelmEH9:H2+4+wViNOzvm+KSDFOelH
- TLSH T1B0F64A47E8A515D9C0AED175CA66A113BB713C894F3023D36BA0F6287F32BD09EB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1