ffdf470a7a7844fc99df36d937d36c5ce36cef864538aff99f837f7535e84e24

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 00:02

Target
2026-08-06_f87c00e627cfb365461fe0a620e45e69_avaddon_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 30.0MB
Sample260807-abhcaatdna
SHA256 ffdf470a7a7844fc99df36d937d36c5ce36cef864538aff99f837f7535e84e24
MD5 f87c00e627cfb365461fe0a620e45e69
SHA1 d7d2314329a3344fa6c9d0e53c4a6ecc1915864b
SHA512 63e7da2b2fe770e55ea9a5facfb295a503b778b0822bba7bbfe4ef78f7470bfc881997564a3cb6b83452df65d47e0af2e7391234f4f5e1ef09f974b510c6aa07
SSDEEP 98304:WIqh7SYCkN/u3AaF7JhpdLK136y7sezK1aU+JKl38MiN6ZlN2OD7XDb1j0YepbFI:WZbgH/ryYn1qKxDP2ODjDbx8bSm+dU
TLSH
T1FB67284BEA224DD4C0A99035897652126B607C470F28B3C73B5CA61C2F7E7DE6B7670E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3088	2026-08-06_f87c00e627cfb365461fe0a620e45e69_avaddon_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3088	2026-08-06_f87c00e627cfb365461fe0a620e45e69_avaddon_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3088	2026-08-06_f87c00e627cfb365461fe0a620e45e69_avaddon_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
3088	2026-08-06_f87c00e627cfb365461fe0a620e45e69_avaddon_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-06_f87c00e627cfb365461fe0a620e45e69_avaddon_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-06_f87c00e627cfb365461fe0a620e45e69_avaddon_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3088