General
- Target 2026-08-10_a205f10869cfa7a1d0c459bb69a342a3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- Sample260810-cl33vade77
- SHA256 b5e73fde2cf27cb4767a30be9f303a1642dbb780ae1b28afcc7c5a4a71182859
- MD5 a205f10869cfa7a1d0c459bb69a342a3
- SHA1 fb3dcde1b3eb3b73f5efcca95ac203a9be4d39ae
- SHA512 368a183f453e23e2139003d6e2eb829ef1d2e4ea2219233d6e4422fa5c5852b1ad370f03046a51a9005f6e4ca04ad08e949b8a64a178e4b0c8bbd9e96a47b143
- SSDEEP 98304:HkmVSn04VUJDE3a443CeaFOumvBh8huTRE:HY04VUJYKb3CFn
- TLSH T103763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_a205f10869cfa7a1d0c459bb69a342a3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_a205f10869cfa7a1d0c459bb69a342a3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_a205f10869cfa7a1d0c459bb69a342a3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- SHA256 b5e73fde2cf27cb4767a30be9f303a1642dbb780ae1b28afcc7c5a4a71182859
- MD5 a205f10869cfa7a1d0c459bb69a342a3
- SHA1 fb3dcde1b3eb3b73f5efcca95ac203a9be4d39ae
- SHA512 368a183f453e23e2139003d6e2eb829ef1d2e4ea2219233d6e4422fa5c5852b1ad370f03046a51a9005f6e4ca04ad08e949b8a64a178e4b0c8bbd9e96a47b143
- SSDEEP 98304:HkmVSn04VUJDE3a443CeaFOumvBh8huTRE:HY04VUJYKb3CFn
- TLSH T103763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE