General
- Target 2026-08-25_f8a584dcd37353f576ab20710dc72142_coinminer_dosia_glassworm_hijackloader_poet-rat_quasar-rat_snatch
- Size 10.1MB
- Sample260826-bkhvvabd33
- SHA256 8c668cfd0d0368bb5ae4ff61066de7399a56da3bce3fdba723d218bfb229e92e
- MD5 f8a584dcd37353f576ab20710dc72142
- SHA1 bfefe57c5a33100413546b87f6f4bb5885a864fd
- SHA512 242dd66bf7d7ea056e0d394f14ab6c7e19ea54ef1a3f3316b7278fa4cca7a95894c8390f50f1bff375696a68c341b1ab3abc609f6d896a66f5903ac68214414f
- SSDEEP 196608:V+LNHs/ntdG3Nb+LEjH6+tEUIrbbKkUBVDjhy:VoVsvtUbaEW+LCEVD9y
- TLSH T18CB6AE13EC59D8E5D1AED130896691B37B217C481B3123D76BA0B6387FB6BD0ADB9304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_f8a584dcd37353f576ab20710dc72142_coinminer_dosia_glassworm_hijackloader_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_f8a584dcd37353f576ab20710dc72142_coinminer_dosia_glassworm_hijackloader_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_f8a584dcd37353f576ab20710dc72142_coinminer_dosia_glassworm_hijackloader_poet-rat_quasar-rat_snatch
- Size 10.1MB
- SHA256 8c668cfd0d0368bb5ae4ff61066de7399a56da3bce3fdba723d218bfb229e92e
- MD5 f8a584dcd37353f576ab20710dc72142
- SHA1 bfefe57c5a33100413546b87f6f4bb5885a864fd
- SHA512 242dd66bf7d7ea056e0d394f14ab6c7e19ea54ef1a3f3316b7278fa4cca7a95894c8390f50f1bff375696a68c341b1ab3abc609f6d896a66f5903ac68214414f
- SSDEEP 196608:V+LNHs/ntdG3Nb+LEjH6+tEUIrbbKkUBVDjhy:VoVsvtUbaEW+LCEVD9y
- TLSH T18CB6AE13EC59D8E5D1AED130896691B37B217C481B3123D76BA0B6387FB6BD0ADB9304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.