General
- Target 2026-08-12_709c10b192b494f03e75db6246ebf632_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 6.8MB
- Sample260812-kmbc8asfnc
- SHA256 d01890ab1c24481020892951da47715bf2a2e66e42becee7499bf6258732fa7c
- MD5 709c10b192b494f03e75db6246ebf632
- SHA1 174d062a0707d8588230797918d23df95fa295dc
- SHA512 35eb67f58b161dcf9d9014c9769ba318a0d1c6a34d16e7c4af52186c52706a7fe0f7ce961ab077969bd078312f247ac90c55ee4fee529aaecc88e7ff4363ce62
- SSDEEP 49152:UjRgYzEvzV4X5IDaTDbXYx3B3S18uucX5BZm8G6BThrUTgj5xjiKKdG5pYuNGr0Y:Uj7AsDoSX58LTgnK85pXQYE
- TLSH T1A6763917ECA904E9C0AED1308A6695637F717C485B3123D72B50F6243F76BE0AEBA354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-12_709c10b192b494f03e75db6246ebf632_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_709c10b192b494f03e75db6246ebf632_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_709c10b192b494f03e75db6246ebf632_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 6.8MB
- SHA256 d01890ab1c24481020892951da47715bf2a2e66e42becee7499bf6258732fa7c
- MD5 709c10b192b494f03e75db6246ebf632
- SHA1 174d062a0707d8588230797918d23df95fa295dc
- SHA512 35eb67f58b161dcf9d9014c9769ba318a0d1c6a34d16e7c4af52186c52706a7fe0f7ce961ab077969bd078312f247ac90c55ee4fee529aaecc88e7ff4363ce62
- SSDEEP 49152:UjRgYzEvzV4X5IDaTDbXYx3B3S18uucX5BZm8G6BThrUTgj5xjiKKdG5pYuNGr0Y:Uj7AsDoSX58LTgnK85pXQYE
- TLSH T1A6763917ECA904E9C0AED1308A6695637F717C485B3123D72B50F6243F76BE0AEBA354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1