Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/08/2026, 02:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_9637072497604c09ed96ff65b3ab83b6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_9637072497604c09ed96ff65b3ab83b6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-01_9637072497604c09ed96ff65b3ab83b6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
- Size 62.8MB
- Sample260801-dff7kaweke
- SHA256 716997eecfef27030cf861d5f02b1dded5cb9986e405e0fef29f0ff028438794
- MD5 9637072497604c09ed96ff65b3ab83b6
- SHA1 2e1aaf8f62b7dba8faf8d6b5936fb1c1603947d7
- SHA512 b5dfefe1b2d2cda7c9bb97480a7604b7b21fc7cdb5eb949dd20741e55be9ce5707e4cba4b9fd92847753f802457f9d39d5988e63ae72467ce25e234d4a69bda3
- SSDEEP 196608:Rsj28c1CKfhLAygaR5RwrzKoDwqzk2eErtH5tBvWuCcbVeYEa5XADLyuzqRRxqGe:RGShLhRwrzDUqzk2eyXCseYD5cql2T
- TLSH T1F1E74B47BA690CE6C1EEC635C9624A13BF717C89876023C75F69B7242F3ABD06679340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2880 2026-08-01_9637072497604c09ed96ff65b3ab83b6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 2880 2026-08-01_9637072497604c09ed96ff65b3ab83b6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 2880 2026-08-01_9637072497604c09ed96ff65b3ab83b6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 2880 2026-08-01_9637072497604c09ed96ff65b3ab83b6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-01_9637072497604c09ed96ff65b3ab83b6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-01_9637072497604c09ed96ff65b3ab83b6_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2880