08444a1235d5eb982acc845d2c8319f47a3a69601343389cebd35fa0a9f3e301

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 03:29

Target
2026-07-30_548673dc182b5ae56aa7d42a215d0803_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 9.6MB
Sample260730-d1y8wabb45
SHA256 08444a1235d5eb982acc845d2c8319f47a3a69601343389cebd35fa0a9f3e301
MD5 548673dc182b5ae56aa7d42a215d0803
SHA1 437715b723bf9122f005f0ddbbdee8a95911c717
SHA512 be834f1fc9d8d652396f977b121ebcd9c10d50bdda321541eab5c8b1c426d1e4a47d5dc6c8c6cb2962b0c3f0908f0d5d9e391dd603b6a99222b89802670b953c
SSDEEP 98304:+8iAQfX4nxrKtsbrBax/N+aWfZrNqbMQ+1Gzl6mRkP9PrFWTVTV2ze9nEa9k+QmQ:DnciTKQ
TLSH
T172A64917ECA514E9C4EEC131CABA95227B217C494B3123D71F60B6646F76BD06EBE308
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3696	2026-07-30_548673dc182b5ae56aa7d42a215d0803_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3696	2026-07-30_548673dc182b5ae56aa7d42a215d0803_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3696	2026-07-30_548673dc182b5ae56aa7d42a215d0803_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3696	2026-07-30_548673dc182b5ae56aa7d42a215d0803_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-30_548673dc182b5ae56aa7d42a215d0803_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_548673dc182b5ae56aa7d42a215d0803_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3696