General

  • Target
    2026-08-18_9a891567bf03c0f2615f619c37ed938a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
  • Size 7.1MB
  • Sample260818-vtpvasem4s
  • SHA256 363806adf53215b567099b55da5a05c25b74b7744c18c5c395ccd1fc842d8985
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-08-18_9a891567bf03c0f2615f619c37ed938a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
    .exe 7.1MB

2026-08-18_9a891567bf03c0f2615f619c37ed938a_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

  • IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
  • SHA256 363806adf53215b567099b55da5a05c25b74b7744c18c5c395ccd1fc842d8985
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
62:bf:65:84:ea:f6:45:55:4a:5d:00:42:40:5c:0c:69:6d:70:bc:36:8f:4a:24:3f:cf:8d:67:0d:54:ec:30:ad
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=SERHAT DOGAN,O=SERHAT DOGAN,L=Enfield,C=GB
Minor OS version
1
Major OS version
6
Entry point
556384
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths