Analysis
- max time kernel
149s - max time network
95s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
26/04/2026, 04:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-26_914b322c0e5dc4b3be996bfc9a8b2cf1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_914b322c0e5dc4b3be996bfc9a8b2cf1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-04-26_914b322c0e5dc4b3be996bfc9a8b2cf1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
- Size 8.5MB
- Sample260426-fa5dbags2r
- SHA256 77889716ba8afbe5a3ab0d9e1b4f012fb03c9f84d982ef1a0134a7a9f4e2b74d
- MD5 914b322c0e5dc4b3be996bfc9a8b2cf1
- SHA1 4c00d0d95bb727dd90995180eb36f2821795b1f8
- SHA512 140bfa54e72faacfcd5ecbd54cb1b14e153add8864d87c4ee2ab1edc7793605ee3b4117c10d7b41453dd6c6b3df8c3f2306030ef42149106e39d8630c6cfd8cc
- SSDEEP 49152:Gm0eJ+PtTnoJBSzi27zqFYYKshmjF0x/HK+TooJOXGfmqHkDe/KftyVE9aIDfgDX:Gmt8VTGKgc3IqawDoDz1fSzE
- TLSH T15C962857EC6554E9C0EED1318A6291237BB27C880B3123D72F50B7242F36BE4AEB9754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\agent-2928892130.tmp 2026-04-26_914b322c0e5dc4b3be996bfc9a8b2cf1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-04-26_914b322c0e5dc4b3be996bfc9a8b2cf1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-04-26_914b322c0e5dc4b3be996bfc9a8b2cf1_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"1⤵
- Drops startup file
PID:2012