General
- Target 2026-08-13_6fe4015dd28318df9d7f64d56b41af8d_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat
- Size 55.0MB
- Sample260813-e9nn6ssakg
- SHA256 4f6547a899801ff16f5ce0f66ca8e84e19cabb0841a3511de8dfeb55046be448
- MD5 6fe4015dd28318df9d7f64d56b41af8d
- SHA1 7b60584ebaca258742ad83313755ca6d10fb544d
- SHA512 6e37c98a6d2db87107cbdea86fa90be8349ebac855d119e03bc3a592b9fdae833925b71edb3d99f696a0a7aada81d2adbb2912196993d967512d5298d44f97f7
- SSDEEP 393216:7Wk+vYTQy3s5wW+1F3rbYG1JnCSS3Zdp1uPGiSPWw1J/Rfpo2Luw:7Wk+vYTD85V+1NrbYQ8fp1uVS+w1nfu
- TLSH T1FCC76C03E5D26699C095E97AC3265313ABA0BC4E073463C7DF90AF916F76BC0DA79B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-13_6fe4015dd28318df9d7f64d56b41af8d_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_6fe4015dd28318df9d7f64d56b41af8d_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_6fe4015dd28318df9d7f64d56b41af8d_coinminer_dosia_glassworm_icedid_luca-stealer_njrat_poet-rat_quasar-rat
- Size 55.0MB
- SHA256 4f6547a899801ff16f5ce0f66ca8e84e19cabb0841a3511de8dfeb55046be448
- MD5 6fe4015dd28318df9d7f64d56b41af8d
- SHA1 7b60584ebaca258742ad83313755ca6d10fb544d
- SHA512 6e37c98a6d2db87107cbdea86fa90be8349ebac855d119e03bc3a592b9fdae833925b71edb3d99f696a0a7aada81d2adbb2912196993d967512d5298d44f97f7
- SSDEEP 393216:7Wk+vYTQy3s5wW+1F3rbYG1JnCSS3Zdp1uPGiSPWw1J/Rfpo2Luw:7Wk+vYTD85V+1NrbYQ8fp1uVS+w1nfu
- TLSH T1FCC76C03E5D26699C095E97AC3265313ABA0BC4E073463C7DF90AF916F76BC0DA79B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables referencing many confidential data stores found in browsers, mail clients, crypt