General
- Target 2026-08-21_4bb11fd5c2c2bb2d8035c4436be5834c_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch
- Size 13.3MB
- Sample260821-e8th2agn2t
- SHA256 23ff43f066be856d281147896694bcacfe270e5a32f8395f4c22e25eddc97e6b
- MD5 4bb11fd5c2c2bb2d8035c4436be5834c
- SHA1 88e13bccfd86ad7bf71ee1dad3a2fd9932465c87
- SHA512 fa7c330c276eb1c0c6a0bd4a37bd6b624e062829810769b56dff946ac0ba81631cb1da6a063f83cd42be28cae759fe9a79051191caa29f19208e69b36d5888a3
- SSDEEP 98304:OkoECqWUyHTwMJOg088/J/CZxKLCzKwUVCrtvfvXvYvzv+vpvrv3vLnyhU+c78Tv:Oem38ViDUVD++JTnv
- TLSH T1F4E63947ECA545A5C0EEC576C6669512BB313C894F3063E76B90FB242F37BD0AAB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_4bb11fd5c2c2bb2d8035c4436be5834c_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_4bb11fd5c2c2bb2d8035c4436be5834c_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4bb11fd5c2c2bb2d8035c4436be5834c_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch
- Size 13.3MB
- SHA256 23ff43f066be856d281147896694bcacfe270e5a32f8395f4c22e25eddc97e6b
- MD5 4bb11fd5c2c2bb2d8035c4436be5834c
- SHA1 88e13bccfd86ad7bf71ee1dad3a2fd9932465c87
- SHA512 fa7c330c276eb1c0c6a0bd4a37bd6b624e062829810769b56dff946ac0ba81631cb1da6a063f83cd42be28cae759fe9a79051191caa29f19208e69b36d5888a3
- SSDEEP 98304:OkoECqWUyHTwMJOg088/J/CZxKLCzKwUVCrtvfvXvYvzv+vpvrv3vLnyhU+c78Tv:Oem38ViDUVD++JTnv
- TLSH T1F4E63947ECA545A5C0EEC576C6669512BB313C894F3063E76B90FB242F37BD0AAB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
UPX dump on OEP (original entry point)