2026-09-25_81621636ab9f35a2881cf51cc8f42095_coinminer_dosia_eternalromance_glassworm_malwareactor_omgwtfbbqapt_poet-rat_quasar-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-25_81621636ab9f35a2881cf51cc8f42095_coinminer_dosia_eternalromance_glassworm_malwareactor_omgwtfbbqapt_poet-rat_quasar-rat_snatch
Size 20.5MB
Sample260925-3tapdassat
SHA256 a204273a5334f1619bae9e174dea0fb4f8a2452f9e93271182e1fc4577d522be
MD5 81621636ab9f35a2881cf51cc8f42095
SHA1 7b624703a8300dcdee2fecd070f7bb86cf07c57e
SHA512 3ca90f20bf57f94f33e2d10008fb7fd043e944145465308c85ae143d0f5cfcf007d93235737184e93af6f51135cefa1d047f4f40b1c85da21b7124cf65426ef4
SSDEEP 196608:Ex3NsYvExUBNixthoxLKqGSh3brqM+UjI0sLo+xMmvWL/C4msoLzmZhxnMgq/:DeICN2hLYdQVMmvWvmrm/xMge
TLSH
T1B2278C07E86516E9C0ADD271C5769213BA717C8A5B3223D71FA0F6202FB3BD0ADB9714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-25_81621636ab9f35a2881cf51cc8f42095_coinminer_dosia_eternalromance_glassworm_malwareactor_omgwtfbbqapt_poet-rat_quasar-rat_snatch

File Explorer

2026-09-25_81621636ab9f35a2881cf51cc8f42095_coinminer_dosia_eternalromance_glassworm_malwareactor_omgwtfbbqapt_poet-rat_quasar-rat_snatch

.exe 20.5MB

2026-09-25_81621636ab9f35a2881cf51cc8f42095_coinminer_dosia_eternalromance_glassworm_malwareactor_omgwtfbbqapt_poet-rat_quasar-rat_snatch

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 a204273a5334f1619bae9e174dea0fb4f8a2452f9e93271182e1fc4577d522be
MD5 81621636ab9f35a2881cf51cc8f42095
SHA1 7b624703a8300dcdee2fecd070f7bb86cf07c57e
SHA512 3ca90f20bf57f94f33e2d10008fb7fd043e944145465308c85ae143d0f5cfcf007d93235737184e93af6f51135cefa1d047f4f40b1c85da21b7124cf65426ef4
SSDEEP 196608:Ex3NsYvExUBNixthoxLKqGSh3brqM+UjI0sLo+xMmvWL/C4msoLzmZhxnMgq/:DeICN2hLYdQVMmvWvmrm/xMge
TLSH
T1B2278C07E86516E9C0ADD271C5769213BA717C8A5B3223D71FA0F6202FB3BD0ADB9714
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

568800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

7.0MB

Virtual Size

7.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6.9MB

Virtual Size

6.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

530KB

Virtual Size

32.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

127KB

Virtual Size

127KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

356B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

220KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

63B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/95

Size

497KB

Virtual Size

497KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/112

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

113KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

878KB

Virtual Size

878KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-09-25_81621636ab9f35a2881cf51cc8f42095_coinminer_dosia_eternalromance_glassworm_malwareactor_omgwtfbbqapt_poet-rat_quasar-rat_snatch

kernel32

generic