Analysis
- max time kernel
149s - max time network
160s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/05/2026, 19:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe
- Size 77.8MB
- Sample260515-yle7nsat6n
- SHA256 9e3fa565e40a7a37ea493ae1894e2a0e3a35977fcad366b187add22d3f336a74
- MD5 1574ff6b71f6e5afec8a3e1a9177a960
- SHA1 0c8ca6a0561211855ee0221679c9a8229d3ffc34
- SHA512 d6adb835cc5245e49dcad6107ca30f3dc2fd1db8ad6ae8d5116feae6fd6e26ad25be462057eef167ed06c76542dec2f6a2e90cc558acf75500ae1e5d8634bbd9
- SSDEEP 196608:RCSdnRPsSGRcQw3mZM1xazzLJHc6STvrmCSdaF92kOXHpl6OqfzRUyYGfgkSsFfv:rRP+RcQwW61A6jDrVrRnosaEwu
- TLSH T14208194EFB01CED3F546923458978BA02772ECB54BA1830332657B2C6FBF2485EE6594
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 26 IoCs
pid Process 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe 4308 2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-15_1574ff6b71f6e5afec8a3e1a9177a960_akira_amadey_coinminer_dosia_glassworm_poet-rat_quasar-rat.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4308