General
- Target 2026-09-01_683f5f00e2c98e56ef345d0b31c864e3_cobalt-strike_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 17.9MB
- Sample260903-mmbp4agf55
- SHA256 a6f89d84e1b7b8d3eb3c9b839b5618463a3a5bde4658e09f68625e07e4ae74c5
- MD5 683f5f00e2c98e56ef345d0b31c864e3
- SHA1 18f1b8a34058e7990d127931d6d6512bfbd2540f
- SHA512 5d1d72f3fe6547206eb49293b02860ab16fd7a9785c88a64205c060de2b84f578dd84868750ddf832f5fad727133b950c72710270006adb5c5e8e10e217da8c6
- SSDEEP 98304:Ly7YJqgxV23If9yoyb1qLb/dgnREBmrxvJvJvVvZvyvdvfvMvDY6S4iU29sf2TRC:L5EwG02EBJI2x6
- TLSH T1C01749C7FCA025A4C0A9D37596669553BA713C884F2933D71B10FE682F37BD0AAB5306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-01_683f5f00e2c98e56ef345d0b31c864e3_cobalt-strike_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_683f5f00e2c98e56ef345d0b31c864e3_cobalt-strike_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_683f5f00e2c98e56ef345d0b31c864e3_cobalt-strike_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 17.9MB
- SHA256 a6f89d84e1b7b8d3eb3c9b839b5618463a3a5bde4658e09f68625e07e4ae74c5
- MD5 683f5f00e2c98e56ef345d0b31c864e3
- SHA1 18f1b8a34058e7990d127931d6d6512bfbd2540f
- SHA512 5d1d72f3fe6547206eb49293b02860ab16fd7a9785c88a64205c060de2b84f578dd84868750ddf832f5fad727133b950c72710270006adb5c5e8e10e217da8c6
- SSDEEP 98304:Ly7YJqgxV23If9yoyb1qLb/dgnREBmrxvJvJvVvZvyvdvfvMvDY6S4iU29sf2TRC:L5EwG02EBJI2x6
- TLSH T1C01749C7FCA025A4C0A9D37596669553BA713C884F2933D71B10FE682F37BD0AAB5306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
UPX dump on OEP (original entry point)