Analysis

  • max time kernel
    148s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    05/07/2026, 01:52

General

  • Target
    2026-07-05_168c37df38245ca3b1da6e21a837d62f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
  • Size 15.0MB
  • Sample260705-cat1sscs2m
  • SHA256 2f39e82150490a952e095e63d3d6599be658e455751893452e9ec1db9e1d5ab5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-05_168c37df38245ca3b1da6e21a837d62f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-05_168c37df38245ca3b1da6e21a837d62f_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1432

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        manifest.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\.installing-tree-3830706686\manifest.json
        • Size 8KB
        • SHA256 6d4b64b8cec4c715c7a7e4fcb005a212b1e8b48c4bd87adbbbbfd69c7125fdcc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hideout_items_screen.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\hideout_items_screen.json
        • Size 188KB
        • SHA256 b0a7febd6fc157c895ef07d0e1c3ff4e520690c36bde1085f4b7f901d7b115ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        items_catalog.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\items_catalog.json
        • Size 217KB
        • SHA256 f7af7a6362145d40dc6c5b8c664899fc5bda1b7513ca3464a8038d7328988764
        • MD5 SHA1 SHA512 SSDEEP TLSH

        items_farm_categories.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\items_farm_categories.json
        • Size 8KB
        • SHA256 13c461abcbbfefa6916e9317261556c5a1b81bb6d5cfdd11e61263a050cc073f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\customs\map.json
        • Size 118KB
        • SHA256 378dc127beccacf24627a1f42c06c0df59f7e67a45fc13d061c6d8f78b2b3f75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\factory\map.json
        • Size 71KB
        • SHA256 3ec5d7e4a9f79610d1ffd68e4f2cdfc6833e1843f50b2b0ec157f99de4ef8357
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\ground_zero\map.json
        • Size 37KB
        • SHA256 072be44e36567e0b27f6b5d705e5cd36102fcaa5e33e008433e157388d1c86b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\icebreaker\map.json
        • Size 2KB
        • SHA256 fc2a175ab2013858d2feeb586c2809400ca884bc26cac3fcc73afd626eb15e72
        • MD5 SHA1 SHA512 TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\interchange\map.json
        • Size 85KB
        • SHA256 005daf99544c58eae4c7c82359bb26130c31900fbf45a08aec4b0ab478826267
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\lab\map.json
        • Size 31KB
        • SHA256 6d06bce6a7c25222b977a1fe4a8340e7ab0159a9539d7df6fa28eacf573b6f0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\labyrinth\map.json
        • Size 19KB
        • SHA256 f68ad17d412ac2f6c5a874abdd16b2dabf929366eeb10faeb26a31a2795a2848
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\lighthouse\map.json
        • Size 101KB
        • SHA256 ce66dcbaa4380c607b475b33d4c9ba348aee4438f032d98e062442c061d7a2d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\reserve\map.json
        • Size 113KB
        • SHA256 070a70f5367536882451f05d1565d7c547bf0cab008c76d706d9d14b7ffdcd6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\shoreline\map.json
        • Size 109KB
        • SHA256 287934bd2723315e4933414b8c01f663a58667df41773eed0d784ae5a1f792fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\streets\map.json
        • Size 189KB
        • SHA256 bd1c58fb66facb0abfd78620839152e681ac1abead01571b8a8d6db6d27a3f9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\terminal\map.json
        • Size 3KB
        • SHA256 8f28f575eda5f2f7d3cee820989424064317b8b06db2e96c301b48d5bc2d0b0e
        • MD5 SHA1 SHA512 TLSH

        map.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\maps\woods\map.json
        • Size 112KB
        • SHA256 925d037b6ec455230edbd1467891db23d185b8113d0a83dc0cb8bde24e949e12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        quest_items_screen.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quest_items_screen.json
        • Size 226KB
        • SHA256 2ccadfad65220aacbcac146dcfdfd9295d05b10340ea64cd096740e02c91a8fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        quest_raid_requirements.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quest_raid_requirements.json
        • Size 319KB
        • SHA256 984ed8d3d6412dfca8e5d0de7117ed4921d750d0faf37020c66f6da1eb0bdba9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        quest_turn_in_items.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quest_turn_in_items.json
        • Size 131KB
        • SHA256 b72d8a1f7978336a57449fd88706a02cd7717dc59c649afde2adf376a8cdd665
        • MD5 SHA1 SHA512 SSDEEP TLSH

        54cb50c76803fa8b248b4571.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\54cb50c76803fa8b248b4571.json
        • Size 817KB
        • SHA256 b2d84d8b4e47e4c0fc8349905c982f7c67dfee7b3fcc9e956833b5923a508dff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        54cb57776803fa99248b456e.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\54cb57776803fa99248b456e.json
        • Size 637KB
        • SHA256 a94c3d87f340a7acc2dfa9680d83304b6c49c3549a2126cdc1ad18efa5d0160e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        579dc571d53a0658a154fbec.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\579dc571d53a0658a154fbec.json
        • Size 290KB
        • SHA256 942925053d590e79ccdb168d3ab3897311f6fa3cca80722d0b40416f6f74b18c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        58330581ace78e27b8b10cee.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\58330581ace78e27b8b10cee.json
        • Size 817KB
        • SHA256 4b44444d590ef46338a1ba5623ff50c379acb01950e9a82cac6a49af6762cef3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        5935c25fb3acc3127c3d8cd9.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\5935c25fb3acc3127c3d8cd9.json
        • Size 633KB
        • SHA256 b1741081a253316fb48ddfc50014f24718f75cb94b728ec0875786d3cd7a939a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        5a7c2eca46aef81a7ca2145d.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\5a7c2eca46aef81a7ca2145d.json
        • Size 1.5MB
        • SHA256 f7faaecba4ecbe079fbb511895a3cb4aa29a26dbe945180f0936042b8ca104c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        5ac3b934156ae10c4430e83c.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\5ac3b934156ae10c4430e83c.json
        • Size 627KB
        • SHA256 815aabe481c02afe62089bc6e4e3af31afa0ef9f1dd364d8c71b6f672a0dd0ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        5c0647fdd443bc2504c2d371.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\5c0647fdd443bc2504c2d371.json
        • Size 619KB
        • SHA256 bf82a07a41bdc96d9ce544c65c4b6b1781f1c2fa0a3276bcd93034f33d71e8bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        638f541a29ffd1183d187f57.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\638f541a29ffd1183d187f57.json
        • Size 273KB
        • SHA256 93bf2a3b33765b7e9e753af55003ab5d83c4da7e6c1cb066be4339ac6e68689e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        656f0f98d80a697f855d34b1.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\656f0f98d80a697f855d34b1.json
        • Size 224KB
        • SHA256 381ce10e4793477ea4b147700dbf70feedff7066b9d85f900f37644ef497a25d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        6617beeaa9cfa777ca915b7c.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\6617beeaa9cfa777ca915b7c.json
        • Size 95KB
        • SHA256 416f65d34635e6c71817b3168b0b88d2a705418cf8864005a4331c9282168971
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unknown.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests\unknown.json
        • Size 35KB
        • SHA256 8ec426bbb40e515766772f5ee424e55f009df484fcdf47890dc23f2daeb915ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        quests_index.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests_index.json
        • Size 463KB
        • SHA256 01ce3b0e534dd8f4d48cd16ff24727d367e64ab84df86cabaf3715c825c329e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        quests_screen.json

        • Path C:\Users\Admin\AppData\Local\TarkovPriceNativeLite\app-ready\bundles\local.2026.06.26.2234_e3ea3ec6cefd\app\quests_screen.json
        • Size 2KB
        • SHA256 091c1baa8299f4c4ac7834612d26e8f7e44041e15d801406d7d3dbdd4a548094
        • MD5 SHA1 SHA512 TLSH