Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
29/06/2026, 17:52
General
- Target 2026-06-26_19a581ddb4bb18fff11979f143d6b7de_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch.exe
- Size 11.4MB
- Sample260629-wf8wpaa19v
- SHA256 39aa28ab1f0c9353bd112e7a4bc7c54d1f866a53bf1a31bde3c8cd25be1cf229
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-26_19a581ddb4bb18fff11979f143d6b7de_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-26_19a581ddb4bb18fff11979f143d6b7de_coinminer_dosia_elex_glassworm_poet-rat_quasar-rat_sliver_snatch.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage