General
- Target 2026-08-23_9eb509376e5f59b54911bdaf3ef96059_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.3MB
- Sample260824-d6ndkaca42
- SHA256 f0f18efdc6980a4feb2317d54b39b5314874cc5f57cf8a636e947f8086f148bb
- MD5 9eb509376e5f59b54911bdaf3ef96059
- SHA1 5e5372c0606a5233c2fee11d8d0bf1679f47cb89
- SHA512 959c2c7c7a18dcd4b059d7b6bda492e31daabdf3e02a902e759338823d967fc8a992b2eed6d67e01039f2d2556a08572f6bad0572c156177a7488f779dd2fa2d
- SSDEEP 98304:+5OR/Njtqk5kRMjeZB4fJEheit/hDQpChDMFBMeQEJoR:OINpqk5Xku2h5JDuMYJo
- TLSH T14CE63B17EDA510A5F0ADC53489E291527FB97C890B2123D31B90F7382F77BE06AB9352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_9eb509376e5f59b54911bdaf3ef96059_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_9eb509376e5f59b54911bdaf3ef96059_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_9eb509376e5f59b54911bdaf3ef96059_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 14.3MB
- SHA256 f0f18efdc6980a4feb2317d54b39b5314874cc5f57cf8a636e947f8086f148bb
- MD5 9eb509376e5f59b54911bdaf3ef96059
- SHA1 5e5372c0606a5233c2fee11d8d0bf1679f47cb89
- SHA512 959c2c7c7a18dcd4b059d7b6bda492e31daabdf3e02a902e759338823d967fc8a992b2eed6d67e01039f2d2556a08572f6bad0572c156177a7488f779dd2fa2d
- SSDEEP 98304:+5OR/Njtqk5kRMjeZB4fJEheit/hDQpChDMFBMeQEJoR:OINpqk5Xku2h5JDuMYJo
- TLSH T14CE63B17EDA510A5F0ADC53489E291527FB97C890B2123D31B90F7382F77BE06AB9352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables Discord URL observed in first stage droppers
-
UPX dump on OEP (original entry point)