1af5511124eebb9f230dba48e77e0394838ce700b0e2f259b0a31ada15eb6d4a

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 23:27

Target
2026-06-04_083e67414057fc2e14afcc756ed138e0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 9.4MB
Sample260604-3ffngagx4v
SHA256 1af5511124eebb9f230dba48e77e0394838ce700b0e2f259b0a31ada15eb6d4a
MD5 083e67414057fc2e14afcc756ed138e0
SHA1 12b6d88413031f3f24080ea2e458316879194a9e
SHA512 4774ebc440ab68c8e083b35076477214a65a48678c3fd805b59cd8496702c65a04566e07f9d40d1f47290afa4f20e5884f6b6da5af7153bc7ec1e5075aaea60e
SSDEEP 98304:hRODlVBTGwbk6fHpf6K5yEluDe6HIJF9TMCnRp6bXCKwKE++:z0PTGqkwJfPluDLIJ3IjXC9X+
TLSH
T1A2A65B5BEDA615E8C5BDD230C562A6137B713C490B2223D31B60F6242F37BE49E793A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3716	2026-06-04_083e67414057fc2e14afcc756ed138e0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3716	2026-06-04_083e67414057fc2e14afcc756ed138e0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3716	2026-06-04_083e67414057fc2e14afcc756ed138e0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3716	2026-06-04_083e67414057fc2e14afcc756ed138e0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-04_083e67414057fc2e14afcc756ed138e0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-04_083e67414057fc2e14afcc756ed138e0_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3716