Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/08/2026, 06:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_5e13e0edeb47d0943254b22c9455f114_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_5e13e0edeb47d0943254b22c9455f114_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-08-05_5e13e0edeb47d0943254b22c9455f114_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
- Size 41.2MB
- Sample260805-hsayja1drb
- SHA256 d2c84dd0f4dce41ca65c2b3313712f068566557a523ea9f3bd207e907af124bf
- MD5 5e13e0edeb47d0943254b22c9455f114
- SHA1 655a78d1e501a29c8667cf1cf77b6e92ce864558
- SHA512 a38c16aea230360542713c9bd38cb8d5ef335685e1cf963a9545e7e4692328c28681f5987fe76c4aa8e8dae2c4eb2f235db179c1598954386baf51d77846466c
- SSDEEP 393216:NHY+hNSS8PnetdZjGCg4BbT6cu4Kuc7iAz4mzqb5s:N/PSS8PentgG8YAGbO
- TLSH T17A975D47E86518F5DEACEA31C5E782127F717C058721A7CB3668A424AF76BC15EBE300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4080 2026-08-05_5e13e0edeb47d0943254b22c9455f114_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 4080 2026-08-05_5e13e0edeb47d0943254b22c9455f114_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 4080 2026-08-05_5e13e0edeb47d0943254b22c9455f114_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 4080 2026-08-05_5e13e0edeb47d0943254b22c9455f114_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-05_5e13e0edeb47d0943254b22c9455f114_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-05_5e13e0edeb47d0943254b22c9455f114_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4080