2026-11-01_a4dda864d17df4ab282e3c955cf94dc8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_a4dda864d17df4ab282e3c955cf94dc8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
Size 30.8MB
Sample261102-p196xsfb53
SHA256 7f7d4fefef55378d7c2542b198ea201a218c2e6fd9952ab3c7e48e68ebe837d1
MD5 a4dda864d17df4ab282e3c955cf94dc8
SHA1 a7cf5e0ffc1a97d99e3adf8baba03508f8d904c2
SHA512 d0b7c99716644a9fc9f05e28b840a8d2b655f45d56fdee74c4bb464b4eb33de511f59261aaef2c007872c511c818f2022e21ded172c5669c2622416bc34ba390
SSDEEP 196608:aMZZPeC8+fCWtN1/Ab+8hPcpP/ZWx/T/qxk89mfCewe/F4RoGqkM+94QieA2S:a2KW/Ab+8hPwnZW51+mfCeweyr42
TLSH
T132676A47E86104E9C69DE271C9A382177B71BC894735A3C72B20B6356F76BD06EBE310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_a4dda864d17df4ab282e3c955cf94dc8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

File Explorer

2026-11-01_a4dda864d17df4ab282e3c955cf94dc8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

.exe 30.8MB

2026-11-01_a4dda864d17df4ab282e3c955cf94dc8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
SHA256 7f7d4fefef55378d7c2542b198ea201a218c2e6fd9952ab3c7e48e68ebe837d1
MD5 a4dda864d17df4ab282e3c955cf94dc8
SHA1 a7cf5e0ffc1a97d99e3adf8baba03508f8d904c2
SHA512 d0b7c99716644a9fc9f05e28b840a8d2b655f45d56fdee74c4bb464b4eb33de511f59261aaef2c007872c511c818f2022e21ded172c5669c2622416bc34ba390
SSDEEP 196608:aMZZPeC8+fCWtN1/Ab+8hPcpP/ZWx/T/qxk89mfCewe/F4RoGqkM+94QieA2S:a2KW/Ab+8hPwnZW51+mfCeweyr42
TLSH
T132676A47E86104E9C69DE271C9A382177B71BC894735A3C72B20B6356F76BD06EBE310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

582880

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

9.5MB

Virtual Size

9.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11.1MB

Virtual Size

11.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

711KB

Virtual Size

33.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

263KB

Virtual Size

262KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

340B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

366KB

Virtual Size

365KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

105B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/95

Size

560KB

Virtual Size

559KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/112

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

216KB

Virtual Size

215KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-11-01_a4dda864d17df4ab282e3c955cf94dc8_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch

kernel32

generic