General
- Target 2026-08-10_7c0325da66fe617a02d131910a68308f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 6.5MB
- Sample260810-e85w3avzh1
- SHA256 a36807dfffc6ca2318f9930e22c7d95ab5237d089426a6ff93eb2c496d63a076
- MD5 7c0325da66fe617a02d131910a68308f
- SHA1 1617f61b8c20c5907e82579a744c202a010aa78d
- SHA512 19559825092158230b802bdb70e689256a578f380dd527231e254bd5a875d25b9c3382152634258912b972ace7b2a146a4c75924191afaa3a8dbf1e846268f51
- SSDEEP 49152:T6A6sw7kBBVRXAaKjQNkBoYFK8BZja/rqI5ZjqYHK9/9M2aj+NDtk8iKQK1K6f8u:T6BJUoROZfIA8Xf8xumvBh8huTEEmJ
- TLSH T1E6665C53EC6555E8C5ADE1718A739253BBB17C881B2123D32B90F2252F73BD0ADB9348
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_7c0325da66fe617a02d131910a68308f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_7c0325da66fe617a02d131910a68308f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_7c0325da66fe617a02d131910a68308f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 6.5MB
- SHA256 a36807dfffc6ca2318f9930e22c7d95ab5237d089426a6ff93eb2c496d63a076
- MD5 7c0325da66fe617a02d131910a68308f
- SHA1 1617f61b8c20c5907e82579a744c202a010aa78d
- SHA512 19559825092158230b802bdb70e689256a578f380dd527231e254bd5a875d25b9c3382152634258912b972ace7b2a146a4c75924191afaa3a8dbf1e846268f51
- SSDEEP 49152:T6A6sw7kBBVRXAaKjQNkBoYFK8BZja/rqI5ZjqYHK9/9M2aj+NDtk8iKQK1K6f8u:T6BJUoROZfIA8Xf8xumvBh8huTEEmJ
- TLSH T1E6665C53EC6555E8C5ADE1718A739253BBB17C881B2123D32B90F2252F73BD0ADB9348
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Adds Run key to start application