General
- Target 2026-08-15_fe29762a0c0ed07cf9e1496fbd477ae0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 16.2MB
- Sample260815-dhm3wsde55
- SHA256 8c8b24bf197b5dbc62c97f2b83903302ad40ad2f948fbace839388d29bc15746
- MD5 fe29762a0c0ed07cf9e1496fbd477ae0
- SHA1 94d2cd47dcddbeadaffd29a4de5bef1d39bd293c
- SHA512 9d26a0a662a902d9fcecd087df27cffc14bb1a0fd462d002fa34ea9e7a0ef8860d09e8e7a22bf1a53236042af32e8d594f1b740a5acd355433726f8e98606cc0
- SSDEEP 196608:rpH5HcqnOTeXqVXNNOZj83+zw//fnryPpCVSnjZBuUYwdf4:rJaqOTeXq1NYZj83n/frEp6MzuUYwd
- TLSH T1E8078D43E87506E9C0AD9276C6779653BA353C894B3163C35B90BA386F33BD0AEB5740
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-15_fe29762a0c0ed07cf9e1496fbd477ae0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_fe29762a0c0ed07cf9e1496fbd477ae0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_fe29762a0c0ed07cf9e1496fbd477ae0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 16.2MB
- SHA256 8c8b24bf197b5dbc62c97f2b83903302ad40ad2f948fbace839388d29bc15746
- MD5 fe29762a0c0ed07cf9e1496fbd477ae0
- SHA1 94d2cd47dcddbeadaffd29a4de5bef1d39bd293c
- SHA512 9d26a0a662a902d9fcecd087df27cffc14bb1a0fd462d002fa34ea9e7a0ef8860d09e8e7a22bf1a53236042af32e8d594f1b740a5acd355433726f8e98606cc0
- SSDEEP 196608:rpH5HcqnOTeXqVXNNOZj83+zw//fnryPpCVSnjZBuUYwdf4:rJaqOTeXq1NYZj83n/frEp6MzuUYwd
- TLSH T1E8078D43E87506E9C0AD9276C6779653BA353C894B3163C35B90BA386F33BD0AEB5740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1