General
- Target 2026-08-11_05efcb8fe3c588a310fa94b279cda07c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.7MB
- Sample260811-w4zb6ayeka
- SHA256 d65fe8cfee4c6df5dacd853f483f1271133c86dc381963b8d0bff47b381c3c81
- MD5 05efcb8fe3c588a310fa94b279cda07c
- SHA1 d0d0c3e91ead19f5e9950a0ca20720dad8f036f9
- SHA512 fe396936ab8f583487d71872b84b7daa8815df09360ff5b9069be65ed0f57af967d2d7a14b0b3c1d17d63c733844cccc502e12f55dc33eb3a18332d1e26c9af9
- SSDEEP 98304:+91TzcZzHDxKOfi9VIIUqx2NumvBh8huTjEG:+fINALOIUahG
- TLSH T19AB64943ECA501E9C1ADC575CA2A9616BB713C894B30A3DB5B50F7252F37BD0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-11_05efcb8fe3c588a310fa94b279cda07c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_05efcb8fe3c588a310fa94b279cda07c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_05efcb8fe3c588a310fa94b279cda07c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.7MB
- SHA256 d65fe8cfee4c6df5dacd853f483f1271133c86dc381963b8d0bff47b381c3c81
- MD5 05efcb8fe3c588a310fa94b279cda07c
- SHA1 d0d0c3e91ead19f5e9950a0ca20720dad8f036f9
- SHA512 fe396936ab8f583487d71872b84b7daa8815df09360ff5b9069be65ed0f57af967d2d7a14b0b3c1d17d63c733844cccc502e12f55dc33eb3a18332d1e26c9af9
- SSDEEP 98304:+91TzcZzHDxKOfi9VIIUqx2NumvBh8huTjEG:+fINALOIUahG
- TLSH T19AB64943ECA501E9C1ADC575CA2A9616BB713C894B30A3DB5B50F7252F37BD0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE