6a6a64b1bafdb33d81a8359d36456b038216aef94a1ae6e71800ea8098ec6b4f

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 03:16

Target
2026-07-30_7d42639effecadb830ac4507512a9663_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 9.6MB
Sample260730-dsrttsycjd
SHA256 6a6a64b1bafdb33d81a8359d36456b038216aef94a1ae6e71800ea8098ec6b4f
MD5 7d42639effecadb830ac4507512a9663
SHA1 d53a889c35022422dddfcadc976c897dbd4dcbb9
SHA512 355f36478849c78a16f6d814fb4e6a484a053816409901bedd4e3d7cfe467ca9aab993dc07c637126181dc8c1259248d3fb64d30bd884cff0157664ad91d8610
SSDEEP 98304:Y56AIHL8vkgilgz+ZTvFxiU+avVvDqXE:QKr5nvCiN
TLSH
T1ABA64913EC6554E9C1AED131CA6696237B707C494B3123E71F60B624AF77BD0AEBA304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3252	2026-07-30_7d42639effecadb830ac4507512a9663_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3252	2026-07-30_7d42639effecadb830ac4507512a9663_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3252	2026-07-30_7d42639effecadb830ac4507512a9663_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3252	2026-07-30_7d42639effecadb830ac4507512a9663_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-30_7d42639effecadb830ac4507512a9663_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_7d42639effecadb830ac4507512a9663_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3252