38cad8ab9cf44f8ec25c8a4e99179b1ee3510dd207e654c6aa1f6786e16d404c

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
27/05/2026, 15:50

Target
2026-05-27_6bf9c13334b0c24b665e9bcd252548d4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 12.6MB
Sample260527-s98w1acy21
SHA256 38cad8ab9cf44f8ec25c8a4e99179b1ee3510dd207e654c6aa1f6786e16d404c
MD5 6bf9c13334b0c24b665e9bcd252548d4
SHA1 ad176b89aa3b6c26d7dc30a13062db93b9e53ca2
SHA512 e242b736b7829e5678ef7214eb3cf9eddf0ce57f1f598369d1b22384f19b7a8bdccbb7b6362d634d54d7abb6fecd2ed39a51d87acab3b72e825eeaf2c821f504
SSDEEP 98304:/eolyDlHEbrhQn9x0D3a/3mLP6Xh4YYY/ahSAPsSSbE:GDBHEbq0T02m4YY+C1
TLSH
T196D64907EDA514E8C4AED1308A6792577F707C494B2067D72BA0F6246F77BD0AEBA310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5076	2026-05-27_6bf9c13334b0c24b665e9bcd252548d4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
5076	2026-05-27_6bf9c13334b0c24b665e9bcd252548d4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
5076	2026-05-27_6bf9c13334b0c24b665e9bcd252548d4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
5076	2026-05-27_6bf9c13334b0c24b665e9bcd252548d4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-27_6bf9c13334b0c24b665e9bcd252548d4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-27_6bf9c13334b0c24b665e9bcd252548d4_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5076