General
- Target 2026-08-13_9a4f1881cceb1f2b5c233ab4e0847f8b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.1MB
- Sample260813-2cv4bazdkc
- SHA256 4cde5f1eed7b2d3629f77f12fc732794a2565d13f5571d8c09848026508164d3
- MD5 9a4f1881cceb1f2b5c233ab4e0847f8b
- SHA1 67b6fa64ea7bb313f754a98e4aede172bd3f17c3
- SHA512 498b65d45dc9864048a9f3e0357ac60fe12594f855aa9836692058d7111b5bf20ca1dbb1bb0f27ff2ce02d1b7136206b5e262c1c77e54d8cc07af4deab594683
- SSDEEP 98304:Kqq/rqPJK2OqtLwW5q0NtaaRQumvBh8huTME:Kz0JKELDq0Nthi
- TLSH T166763A07ECA514E8C0BDD13189639653BB617C485B3223D72B60F6287F7ABE0ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-13_9a4f1881cceb1f2b5c233ab4e0847f8b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_9a4f1881cceb1f2b5c233ab4e0847f8b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_9a4f1881cceb1f2b5c233ab4e0847f8b_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.1MB
- SHA256 4cde5f1eed7b2d3629f77f12fc732794a2565d13f5571d8c09848026508164d3
- MD5 9a4f1881cceb1f2b5c233ab4e0847f8b
- SHA1 67b6fa64ea7bb313f754a98e4aede172bd3f17c3
- SHA512 498b65d45dc9864048a9f3e0357ac60fe12594f855aa9836692058d7111b5bf20ca1dbb1bb0f27ff2ce02d1b7136206b5e262c1c77e54d8cc07af4deab594683
- SSDEEP 98304:Kqq/rqPJK2OqtLwW5q0NtaaRQumvBh8huTME:Kz0JKELDq0Nthi
- TLSH T166763A07ECA514E8C0BDD13189639653BB617C485B3223D72B60F6287F7ABE0ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Executes dropped EXE