Analysis
- max time kernel
150s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/08/2026, 19:42
Behavioral task
behavioral1
Sample
2026-08-06_68e234d762c6209ed54af59d2b8d2f82_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_68e234d762c6209ed54af59d2b8d2f82_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-06_68e234d762c6209ed54af59d2b8d2f82_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
- Size 22.2MB
- Sample260806-yetfqaca37
- SHA256 64d976b694eddcbca42e7237018c5843871e976c0e6488fff232d361bfbea48c
- MD5 68e234d762c6209ed54af59d2b8d2f82
- SHA1 875a86cab946158056306e8211651b14ca42b5e2
- SHA512 92b9b364ff7a7f108526042dd6f5203bc3f787078ef350dd23af52f0331e0c950ebb3401e778fc544ad6e6ce4939c4c372f36faa231289c52cc2657b4a9c336f
- SSDEEP 196608:4I8MX+C2N4CkbkzY8I+uXdZo6AhLAmojj94qz16Cxg9VqyB69:4kXt2eCkVr3AxAzj9xkw6K
- TLSH T1EC377B47E86605E9C9ADE630C4A692227B707C495B3263CB1B60F2387F77BD05EB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 5828 2026-08-06_68e234d762c6209ed54af59d2b8d2f82_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 5828 2026-08-06_68e234d762c6209ed54af59d2b8d2f82_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 5828 2026-08-06_68e234d762c6209ed54af59d2b8d2f82_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 5828 2026-08-06_68e234d762c6209ed54af59d2b8d2f82_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_68e234d762c6209ed54af59d2b8d2f82_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_68e234d762c6209ed54af59d2b8d2f82_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5828