General
- Target 2026-11-12_70c484e32106e0260be80950e8f2e416_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 25.3MB
- Sample261113-aps1yaew3r
- SHA256 26aa43e65bdf9e5226c8c3b0945e8c6fc0c8f3008a68c7c06a23bc6f3b34a8cc
- MD5 70c484e32106e0260be80950e8f2e416
- SHA1 93b72a35eaaddeb91fc5f5fec6c2af46692aa65f
- SHA512 61d3acc0b44cb55026ab14d1bbc577478f0b4ee2e4278aeb152bf59ba9d92ebad6ab60bcef1dd33f82c132f183a81290cd960750876f28392767f6ed5a296c5f
- SSDEEP 196608:LjfhGob7yqgH8MdC7ygwD3O27Lg/LWvbw2oNiRo3bv:JDtgH5WygNHBv
- TLSH T14C475A03F9660CE8E0AEC530C96692127B713C698B7923D71B50F5247F7EBD4A9BA314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_70c484e32106e0260be80950e8f2e416_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_70c484e32106e0260be80950e8f2e416_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch
- Size 25.3MB
- SHA256 26aa43e65bdf9e5226c8c3b0945e8c6fc0c8f3008a68c7c06a23bc6f3b34a8cc
- MD5 70c484e32106e0260be80950e8f2e416
- SHA1 93b72a35eaaddeb91fc5f5fec6c2af46692aa65f
- SHA512 61d3acc0b44cb55026ab14d1bbc577478f0b4ee2e4278aeb152bf59ba9d92ebad6ab60bcef1dd33f82c132f183a81290cd960750876f28392767f6ed5a296c5f
- SSDEEP 196608:LjfhGob7yqgH8MdC7ygwD3O27Lg/LWvbw2oNiRo3bv:JDtgH5WygNHBv
- TLSH T14C475A03F9660CE8E0AEC530C96692127B713C698B7923D71B50F5247F7EBD4A9BA314
- MD5 SHA1 SHA512 SSDEEP TLSH
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2