General
- Target 2026-08-15_ea6d40b7de2d14368b7e325d279ff1d3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- Sample260815-fs3mfayhrh
- SHA256 13e271ccd7f31a0553fcaf51ef771f3407d5753cb87e08da53a8321e041d4e7f
- MD5 ea6d40b7de2d14368b7e325d279ff1d3
- SHA1 3d69487821de49e53ea0f0a2eed119eecff0b50a
- SHA512 0a84a2faea0dcfab14d6e9c33ffb3d0ef47791e6a70eb6aef3e13c442dc801c2cfeae3b97516d6c5d9dc93c711fa6ffa726de3e44098dadc828a3d62a872ee15
- SSDEEP 98304:hzknz/NQTrHcsTDB1REocxS3mC7BvPwH7k/RsC:h+LNHs/ny1SWYYQt
- TLSH T10C767C07EC6954E9D1AED13089769163BB717C881B2123D72B50F6387FB6BE0ADB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_ea6d40b7de2d14368b7e325d279ff1d3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_ea6d40b7de2d14368b7e325d279ff1d3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_ea6d40b7de2d14368b7e325d279ff1d3_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.0MB
- SHA256 13e271ccd7f31a0553fcaf51ef771f3407d5753cb87e08da53a8321e041d4e7f
- MD5 ea6d40b7de2d14368b7e325d279ff1d3
- SHA1 3d69487821de49e53ea0f0a2eed119eecff0b50a
- SHA512 0a84a2faea0dcfab14d6e9c33ffb3d0ef47791e6a70eb6aef3e13c442dc801c2cfeae3b97516d6c5d9dc93c711fa6ffa726de3e44098dadc828a3d62a872ee15
- SSDEEP 98304:hzknz/NQTrHcsTDB1REocxS3mC7BvPwH7k/RsC:h+LNHs/ny1SWYYQt
- TLSH T10C767C07EC6954E9D1AED13089769163BB717C881B2123D72B50F6387FB6BE0ADB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.