General
- Target 2026-08-10_32022cb89cf5a741d8a09f0022ed2736_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- Sample260810-bcn2wsgm8v
- SHA256 6698a080efa199ca31cc1d74b93ea9b1de2832dd4d0150257f1398d201538ec7
- MD5 32022cb89cf5a741d8a09f0022ed2736
- SHA1 7cf590112e1ce01909dc8cdd989500001b62117f
- SHA512 a77353a71f6b7bd8905104299556d0d992ae574cb26a7dd8e674c7ed84cb20fcd85e71520221f761969589dede5b91ee754ab6f97ccf3c8314c3f5f0181d90e9
- SSDEEP 98304:4PPmJAVjmWwo6OtdvmJXVz2rNxvJmtvm+MJED/OcIiOeU/+OEH9:42+4+wViNOtvm+MSDTOeZH
- TLSH T15EF64A47E8A515D9C0ADD175CA66A113BB713C894F3023D36BA0F6287F32BD0AEB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-10_32022cb89cf5a741d8a09f0022ed2736_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_32022cb89cf5a741d8a09f0022ed2736_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_32022cb89cf5a741d8a09f0022ed2736_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.7MB
- SHA256 6698a080efa199ca31cc1d74b93ea9b1de2832dd4d0150257f1398d201538ec7
- MD5 32022cb89cf5a741d8a09f0022ed2736
- SHA1 7cf590112e1ce01909dc8cdd989500001b62117f
- SHA512 a77353a71f6b7bd8905104299556d0d992ae574cb26a7dd8e674c7ed84cb20fcd85e71520221f761969589dede5b91ee754ab6f97ccf3c8314c3f5f0181d90e9
- SSDEEP 98304:4PPmJAVjmWwo6OtdvmJXVz2rNxvJmtvm+MJED/OcIiOeU/+OEH9:42+4+wViNOtvm+MSDTOeZH
- TLSH T15EF64A47E8A515D9C0ADD175CA66A113BB713C894F3023D36BA0F6287F32BD0AEB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1