General
- Target 2026-08-11_9abb693948dbb2f627308acaff4798d8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.7MB
- Sample260811-wtj5gsff85
- SHA256 2aafcbff7b8836615aaf5681a4e41b7899083a08d197fe2e4c60fa27119a26b0
- MD5 9abb693948dbb2f627308acaff4798d8
- SHA1 01c547c1d6d3e693fab2d56f2db9bfd4ee6036d6
- SHA512 8ce4aa0bbb41476b68ed20df532638d2c601088662ee17da959d47bd7aca10be1e84215f8bd7d5ec026f72cf254ba17b6290fb4b88075d8792e4aee3be2072d6
- SSDEEP 98304:/9YrC8KnSrf1+/MFkteSqx2pumvBh8huTdEh:/gD+s9OeSarh
- TLSH T126B64943ECA501E9C1ADC575CA2A9616BB713C894B30A3DB5B50F7252F37BD0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-11_9abb693948dbb2f627308acaff4798d8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_9abb693948dbb2f627308acaff4798d8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_9abb693948dbb2f627308acaff4798d8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 10.7MB
- SHA256 2aafcbff7b8836615aaf5681a4e41b7899083a08d197fe2e4c60fa27119a26b0
- MD5 9abb693948dbb2f627308acaff4798d8
- SHA1 01c547c1d6d3e693fab2d56f2db9bfd4ee6036d6
- SHA512 8ce4aa0bbb41476b68ed20df532638d2c601088662ee17da959d47bd7aca10be1e84215f8bd7d5ec026f72cf254ba17b6290fb4b88075d8792e4aee3be2072d6
- SSDEEP 98304:/9YrC8KnSrf1+/MFkteSqx2pumvBh8huTdEh:/gD+s9OeSarh
- TLSH T126B64943ECA501E9C1ADC575CA2A9616BB713C894B30A3DB5B50F7252F37BD0AEB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE