General
- Target 2026-10-02_534852f9b92c229ff52d669422a125eb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.9MB
- Sample261003-pssa5sdb78
- SHA256 5c85fb56f274df1b79bc123959f17010e3b1df503550c1e8143efee1f4fc32e8
- MD5 534852f9b92c229ff52d669422a125eb
- SHA1 1e7bf96cd1bc707b6ae9dacc56d8087d8cc1172a
- SHA512 52914952d8b6c249d30eef4f05334b8d32709de7a1cfd89665a1809aec794bb3b6d3d9d994ebb0cbc3ebd641e1f924ac052e0a62b05f419efc45b9824f0b623d
- SSDEEP 98304:6iTYMsrsYm7QNeskcxwN6EfLuJX3SNgLoQu2n1dZuvDbMU1rrfKKH4ss:zYKEeyxuTqX3H1dZuMUpfJs
- TLSH T13DC68B43EC6519E9C1AD9231C9B682437B717C490B3227E72B90F2386E77BD0ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_534852f9b92c229ff52d669422a125eb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_534852f9b92c229ff52d669422a125eb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 11.9MB
- SHA256 5c85fb56f274df1b79bc123959f17010e3b1df503550c1e8143efee1f4fc32e8
- MD5 534852f9b92c229ff52d669422a125eb
- SHA1 1e7bf96cd1bc707b6ae9dacc56d8087d8cc1172a
- SHA512 52914952d8b6c249d30eef4f05334b8d32709de7a1cfd89665a1809aec794bb3b6d3d9d994ebb0cbc3ebd641e1f924ac052e0a62b05f419efc45b9824f0b623d
- SSDEEP 98304:6iTYMsrsYm7QNeskcxwN6EfLuJX3SNgLoQu2n1dZuvDbMU1rrfKKH4ss:zYKEeyxuTqX3H1dZuMUpfJs
- TLSH T13DC68B43EC6519E9C1AD9231C9B682437B717C490B3227E72B90F2386E77BD0ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1