Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/07/2026, 03:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_7e6a61c7faff253556bafd4fe6aa2818_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_7e6a61c7faff253556bafd4fe6aa2818_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-30_7e6a61c7faff253556bafd4fe6aa2818_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
- Size 9.6MB
- Sample260730-dspdpsybre
- SHA256 21df3595ab518a3191675de5cbde433a490a793058a55f90786f848cc68daa8a
- MD5 7e6a61c7faff253556bafd4fe6aa2818
- SHA1 40c7681bcacfce3a482eacdfdcce93e529afa598
- SHA512 6acb5b24dfd8f08f58d7e9421a0a2a673c0dd25764103ebe47aaded4a6ea5c67cb85b2bb39f0eb6fdf89a67c19cd4624ee5e2d08ef345eeae39edb2598187a9c
- SSDEEP 98304:+9+legrHp4ZWUJs312YpHvhxX7Y+aAy5GYE:qaBrTl2YpHv/ZlR
- TLSH T1D9A64953ECA914E8C5EEC535CAA695227B613C494B3123E71F60B6347F72BD06EBA304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2104 2026-07-30_7e6a61c7faff253556bafd4fe6aa2818_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 2104 2026-07-30_7e6a61c7faff253556bafd4fe6aa2818_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 2104 2026-07-30_7e6a61c7faff253556bafd4fe6aa2818_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 2104 2026-07-30_7e6a61c7faff253556bafd4fe6aa2818_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-30_7e6a61c7faff253556bafd4fe6aa2818_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-30_7e6a61c7faff253556bafd4fe6aa2818_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2104