General
- Target 2026-10-22_7f96e7af113b5ba61998d1179d67a583_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.4MB
- Sample261024-h1za4aee32
- SHA256 4fe46ca568020c1f84ba4cc28999b72ef674eb95fb61bb24628539e63370b427
- MD5 7f96e7af113b5ba61998d1179d67a583
- SHA1 c364dda281558d10084f974f28a284106456ab9c
- SHA512 37a96002798a594442937981975d834162d3ee31e78f2f9f315b2980515f03faaba702075e982450d9dbb70ac1e3953c6106f42d33f3eb6b62c6fd00aa19f220
- SSDEEP 49152:+pKo+iuuyQ0s2tKptFBU9Z4UYeYHb1C7fn3JX2/bRj2I5Xmo0j929UUYBKQK1Ksi:+pJhpX2tqy5NyLUb0GcE9
- TLSH T1D9764A43EC6514E9C1ADD63489B69253BB717C880B3263D72B90F2387E72BD06D7A394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_7f96e7af113b5ba61998d1179d67a583_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_7f96e7af113b5ba61998d1179d67a583_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_7f96e7af113b5ba61998d1179d67a583_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 7.4MB
- SHA256 4fe46ca568020c1f84ba4cc28999b72ef674eb95fb61bb24628539e63370b427
- MD5 7f96e7af113b5ba61998d1179d67a583
- SHA1 c364dda281558d10084f974f28a284106456ab9c
- SHA512 37a96002798a594442937981975d834162d3ee31e78f2f9f315b2980515f03faaba702075e982450d9dbb70ac1e3953c6106f42d33f3eb6b62c6fd00aa19f220
- SSDEEP 49152:+pKo+iuuyQ0s2tKptFBU9Z4UYeYHb1C7fn3JX2/bRj2I5Xmo0j929UUYBKQK1Ksi:+pJhpX2tqy5NyLUb0GcE9
- TLSH T1D9764A43EC6514E9C1ADD63489B69253BB717C880B3263D72B90F2387E72BD06D7A394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE