General
- Target 2026-09-04_bfd88eb2b8ea7f7974110c4487f2a963_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 9.0MB
- Sample260904-2m7vvs1hrf
- SHA256 08913aa4d8d9473336e746400722e0653de5fbe197ea8cb30c1304ac57e2fd72
- MD5 bfd88eb2b8ea7f7974110c4487f2a963
- SHA1 657022361d1711587d7a3e34d297851a644581e9
- SHA512 d82c5be77f9091c63f16b21f67fc83da55a06198d6bb362659583b7ba0587c6c8a58933a2aeb155694bb947329e98089a2c75e1c0e4a37d2b952c5e8fdabba83
- SSDEEP 98304:/6u1DCtG2mcHkO8r8E8mZU5ORSj5tEj+:9UIsRGOmZu4x
- TLSH T17A963907FCA518E5C1AED23189769152BB71BC484B3123D71B90F6283FB6BD0AEB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_bfd88eb2b8ea7f7974110c4487f2a963_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_bfd88eb2b8ea7f7974110c4487f2a963_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 9.0MB
- SHA256 08913aa4d8d9473336e746400722e0653de5fbe197ea8cb30c1304ac57e2fd72
- MD5 bfd88eb2b8ea7f7974110c4487f2a963
- SHA1 657022361d1711587d7a3e34d297851a644581e9
- SHA512 d82c5be77f9091c63f16b21f67fc83da55a06198d6bb362659583b7ba0587c6c8a58933a2aeb155694bb947329e98089a2c75e1c0e4a37d2b952c5e8fdabba83
- SSDEEP 98304:/6u1DCtG2mcHkO8r8E8mZU5ORSj5tEj+:9UIsRGOmZu4x
- TLSH T17A963907FCA518E5C1AED23189769152BB71BC484B3123D71B90F6283FB6BD0AEB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE