82206305d16d575a8eb710056c3779a69ab381390633f0c16db5684d4a692f74

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 02:54

Target
2026-05-22_5416ca559411cc46f66a4c4542552fa0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 8.3MB
Sample260522-dd9fbscz2p
SHA256 82206305d16d575a8eb710056c3779a69ab381390633f0c16db5684d4a692f74
MD5 5416ca559411cc46f66a4c4542552fa0
SHA1 ffbf44e2ee33d029fe8d04e3d22580ab37be5a5e
SHA512 f1672da6c4daf86593451a740ece0555e36199994d2a7670126332ac60e596a300a9fdf2fd7543c8f11c90cfd704391abd731b4d52b7f9a04ebe93b612ff4b7f
SSDEEP 98304:+ymrNIKTwMZ/8+tlk4wv7CwuOvBhdhuTSE:BcyvMOR7CN
TLSH
T13D964A17ECA595E8C0AED130CA769653BB717C491B3123D72B50F6283FB6BE0A979304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2832	2026-05-22_5416ca559411cc46f66a4c4542552fa0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-22_5416ca559411cc46f66a4c4542552fa0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-22_5416ca559411cc46f66a4c4542552fa0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2832