f17414cce5e1ffb4bd0b41495306a57fbbfaa5dace4f02da4bbb9f8026d343a9

Analysis

max time kernel
150s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 09:10

Target
2026-08-05_56ade2da6af1ec0f3932a8d9eca48459_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 11.8MB
Sample260805-k5e45agg88
SHA256 f17414cce5e1ffb4bd0b41495306a57fbbfaa5dace4f02da4bbb9f8026d343a9
MD5 56ade2da6af1ec0f3932a8d9eca48459
SHA1 6cfe9e01432cecf89474d4538bd31f1998212c61
SHA512 f3052b33725287bea8e6d5b2de27c84aa86842d491e3769ddd688528bc048597ef2b645000b9d520667249035bcb85573f157e65095a880739ace1cd933a13fe
SSDEEP 98304:GjmOc/ve7E9YdtuDzDGWZBO8Hcj9ciW4En:GJuve7gitublB+9ax
TLSH
T117C64917FCA514E4C4AED1348A738626BB717C481B3527D71AA0B7642F37BE0AEB9740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 472 wrote to memory of 4120	472	2026-08-05_56ade2da6af1ec0f3932a8d9eca48459_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe	89

C:\Users\Admin\AppData\Local\Temp\2026-08-05_56ade2da6af1ec0f3932a8d9eca48459_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-05_56ade2da6af1ec0f3932a8d9eca48459_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:472
- C:\Windows\System32\notepad.exe
  C:\Windows\System32\notepad.exe
  2⤵
  PID:4120