aa6bceb44f907c3036ca96c9b9d291c7096e974d22ec208443f2dff7db85f76a

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 16:02

Target
2026-06-04_5338488d230cb17fa8dd0d2e881bf674_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 24.6MB
Sample260604-tgxtpsa15p
SHA256 aa6bceb44f907c3036ca96c9b9d291c7096e974d22ec208443f2dff7db85f76a
MD5 5338488d230cb17fa8dd0d2e881bf674
SHA1 998828e4b37bd920edf3e468944bf8c7d27dac84
SHA512 ce3664b16faa850bd658169b53a73400b54aa48525a6a8d41f4c62ce3a2b5dcb70aabc394a0404ee7845eb676d070c0cde1bf2609a18d7ea568b0d977d3de7e9
SSDEEP 196608:1g5r8/cXfjNTrUz9TbVSuAgyD50/3VLxsw7ay1n2J305ezayK2z:1Or7LNc5VSMz3VLxsw7T2JCOaI
TLSH
T1F6478D03E8A614D9C9EDD630C9B696237B727C494B2163D72B60F6386F72BE05E79304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1584	2026-06-04_5338488d230cb17fa8dd0d2e881bf674_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-04_5338488d230cb17fa8dd0d2e881bf674_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-04_5338488d230cb17fa8dd0d2e881bf674_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1584