13b665bf204978bffd8c2787e47cbc8ffa6118c0eda38af9f7d00979c1826190

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 09:41

Target
2026-08-03_cbbf3acae6148882696b3c2632fcc6f5_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 7.9MB
Sample260804-ln1vyack8s
SHA256 13b665bf204978bffd8c2787e47cbc8ffa6118c0eda38af9f7d00979c1826190
MD5 cbbf3acae6148882696b3c2632fcc6f5
SHA1 ffb424096c17dc825213e47ffeb5fea729f79d5b
SHA512 e52238158b14585d793cb3dc8befbf24276e3e4fea9b7fb546a50c5230886e4213beaf09a69b92c2c4689844a7a98d0d10c574994e37ec116001742e4ab553f7
SSDEEP 49152:/ekC5balirm+Exqs2wfxqk97puFr6ELTDZptKtKUzLRD93NiBbD60UQO2MIjEpx7:/ekA+kYCoDdMk2qpxHtvVpbwzwEHo
TLSH
T1D886494BEDA565E9C0AEC1318A7291137F317C890B2067D32BA0F6282F77BD46DB9354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5004	2026-08-03_cbbf3acae6148882696b3c2632fcc6f5_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
5004	2026-08-03_cbbf3acae6148882696b3c2632fcc6f5_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
5004	2026-08-03_cbbf3acae6148882696b3c2632fcc6f5_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
5004	2026-08-03_cbbf3acae6148882696b3c2632fcc6f5_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_cbbf3acae6148882696b3c2632fcc6f5_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_cbbf3acae6148882696b3c2632fcc6f5_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5004