483f412d30656c51cd5058db7f80b35c02e63209d91b2b4bad3376739446954f

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 09:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-15_a6dac9b4bcb8722f02bd59d4914c1f23_coinminer_dosia_glassworm_malwareactor_omgwtfbbqapt_poet-rat_quasar-rat_snatch.exe
Size 10.2MB
Sample260815-k2nl4asgpg
SHA256 483f412d30656c51cd5058db7f80b35c02e63209d91b2b4bad3376739446954f
MD5 a6dac9b4bcb8722f02bd59d4914c1f23
SHA1 a561ca442ed0213890a56aa07a93350cf34c32ca
SHA512 71c17dd4cf3cd8ec8c083ecbaee283532ba8d23d06ed1192e161ece8884299285429d98291e0757327ba50c5f19e844bea357285cb73dc652aad820f3335cee6
SSDEEP 98304:dmNcRLEZg24LgIoPg+iz+44tO4lBm10w7DV3LE:kkcxR44C1b7Dm
TLSH
T1B7B65A17E8A509E8C0AEC271C6769123BB717C495B3123D32BA0FA242F37BD4AD79754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\2026-08-15_a6dac9b4bcb8722f02bd59d4914c1f23_coinminer_dosia_glassworm_malwareactor_omgwtfbbqapt_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-15_a6dac9b4bcb8722f02bd59d4914c1f23_coinminer_dosia_glassworm_malwareactor_omgwtfbbqapt_poet-rat_quasar-rat_snatch.exe"
1⤵
PID:4824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

.statekey

Path C:\Users\Admin\.cache\dataplane\.statekey
Size 32B
SHA256 2f7fa6631cacbf75909eadb1d21d08c3aedaa6513f15e66e0854b7c76726eb05
MD5 d4323e9cd25763d423e861ab04e94971
SHA1 f039f02d789d20bc80369c4b47ba988767acfb0b
SHA512 fc0df0d8d42514ce6ba75427261e933d9b2473a0d55b647f2e2673380e4206550f3c97e7f86a6d954fc6f482af092ac9f7a9ac7e2e5200792941b823aab276f0
MD5 SHA1 SHA512

Submit Download

users.json.hw

Path C:\Users\Admin\AppData\Local\Temp\TestAccountRehashOnLogin2599920128\001\users.json.hw
Size 96B
SHA256 5d13e84b4e96dd9ebfe6323a6af8c340a8f7c2437cdc9aeb5ec15f5a58c4a89b
MD5 d74ba6a12e6d5c671cef78c003008c78
SHA1 d2f829a1d63ffb887150c4f0683e54263fe7407e
SHA512 520854f0c4b24649a03b4dee9d66a61b0a41900b6b7a9efa56762e2b9fa8430378a1d3550995f15ca69d3b3aa42de25cbcd9fd3c34b44dc756e1307c3b9959d9
TLSH
T15EB01205198D58347C19102F5101E86162446100178FE1710288D0A30898C9CB3044C9
MD5 SHA1 SHA512 TLSH

Submit Download

u.json.hw

Path C:\Users\Admin\AppData\Local\Temp\TestAccountStoreCRUD2289334\001\u.json.hw
Size 96B
SHA256 b424d6863240fc498bc691bf10b2720ec9fbcf1a6f3a979e23e0c01ff597f1b0
MD5 de1f712c0d67a164e0d86b929ce47eab
SHA1 adf4ff22f58509ceb9f61f931231c7d81f6bd58c
SHA512 582f8006426001af5a74b3ff9687efdec690dc46bc3be4a14e1161902e80c99df006f879ef4360de12fc9e0dbddd19a15a34d1b0621168dcddde1de381c53fa1
TLSH
T1FCB0122DC80540B2053451E441F86841109BD40848E50AAD07ACEF8E24B4488F60EF04
MD5 SHA1 SHA512 TLSH

Submit Download

.state_signed

Path C:\Users\Admin\AppData\Local\Temp\TestAdminNoStoreHeaders3318569302\001\.state_signed
Size 25B
SHA256 ffc7c9d002fd818636f7f503d6855bc41f1071d87a39c51b4613a77bd032ce2b
MD5 5f46cb54927490d9aee9c7c02fb08ebd
SHA1 da77c4c19097cc945545e85fe8a8d2ae5be5e717
SHA512 0a63bdbdd0e5ef38b314e9a4a864b70e5fd79ef06f779455b51081cbf5d82dc2cc2818596f011086dbd6b87508f55983c7a603c7121106ca1459475cafba4551
MD5 SHA1 SHA512

Submit Download

audit.jsonl

Path C:\Users\Admin\AppData\Local\Temp\TestAuditAnchoredAfterRotation96077266\001\audit.jsonl
Size 83B
SHA256 94c09860aec4fb46dfbb6ced56a1f4ab65054271765b400ab269ccbcf6e80022
MD5 620e7c4bd68a09cb75300aee398e7858
SHA1 6f6b05d937f5d2f4a0a79aa2aed9f9f120a6f43e
SHA512 c26352dba5b2eb52eef1f36512ed54113fcf57dfa2e78ed99b90a5f0ff38581fcea01e883a60d9c5cd6499251b94d3a5205fbcab57aa011b189649d4c5739e54
TLSH
T107A01220590F1A34025802C000011D02003C803929A08068081AD52C82651A55003453
MD5 SHA1 SHA512 TLSH

Submit Download

audit.jsonl.head

Path C:\Users\Admin\AppData\Local\Temp\TestAuditAnchoredAfterRotation96077266\001\audit.jsonl.head
Size 147B
SHA256 9356d14cd7141ec3001f2563fe104767cc947b387994daf3523748eaae290cd1
MD5 22405bae9d3d8aeec6038e0b6465ec5e
SHA1 22f3a1760e8824b36523f6b98630727f64e17f7f
SHA512 ba8591931401fa83a271b2dec39ba1a25b99e0d7563adcfb0ed02c106c71e238eec6eacc33a11b2c176a6e617edc058cd70d14850c197d4ef4659e90d2ab2ba0
TLSH
T139C02BD3AF23B8F0640083D1411C8470F128E19F00D9F40F72600B8229C8D2A3383DCC
MD5 SHA1 SHA512 TLSH

Submit Download

audit.jsonl

Path C:\Users\Admin\AppData\Local\Temp\TestAuditExportFullTrail1689676327\001\audit.jsonl
Size 549B
SHA256 d8b76b480fa62fa7de4f5010b18d09ea8f267dff7eed7b23591bbc3d3c8bad0f
MD5 a9080c410fad0dc280310c69a6c2ed22
SHA1 81ae72956018a6f09c42433cacc769bc5d3a6b66
SHA512 eaecbd6783d774862353c65431ac2472531f1ba99fb21380aa38c73fa5f2ba3deecc979218af31573bb2d41a88d987fb4ec9abf8a9f05096c7382133865b1640
TLSH
T11BF08B22311E28FDA55427F761225C014C2F54281AF000988976F93327BA6F4B03E54F
MD5 SHA1 SHA512 TLSH

Submit Download

audit.jsonl

Path C:\Users\Admin\AppData\Local\Temp\TestAuditTailTruncationDetected228917236\001\audit.jsonl
Size 340B
SHA256 a1bdfb98861a7a76f4247d38a96128a6b4c1ca6249f937bb17e3bea3028208cb
MD5 50b76be9630aa19889a02d200249d008
SHA1 187605e65146136f14000cb80f9fb474178bea2e
SHA512 c0497934285d052c8db4c4a0952f59eb025bc5482f0b579dd06ba4265743828c102d004f8842b1cb47ad38c13185b5e600616540017dce8ca56706d84b9aad5b
TLSH
T17EE02643380E2EF8A24846D275453D651CAE552909A040E8C966CEAA0BF99B5740B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestCampaignsAndSTIX1028099630\001\.statekey
Size 32B
SHA256 9e0282fd967d56a0e43dc2f1c970d7989d8e3be38b43830ed70180aa722a696f
MD5 b4540751e001f1c22c5c4f8a26e39927
SHA1 6d71669727715f40d3bda9c6080d9091c2910757
SHA512 9ec5b599512c020c8203c6bdce3fd6012c0e79223e88c59422898259eca90d1f29d451934e55f51d40d26235194930f24d5755f5b68d1c0112f7725af19cda9b
MD5 SHA1 SHA512

Submit Download

admin_audit.jsonl

Path C:\Users\Admin\AppData\Local\Temp\TestConfigSaveSpamHTTP1990521752\001\admin_audit.jsonl
Size 4KB
SHA256 cf3fc0ef7822b9ed102d732e52edae88bce94591bbfe0f1364705c59ba382e36
MD5 2861aad03d23b89903d2db8fc4539fdb
SHA1 a930610e0b14b48cd804c98e78c0f96ab7e00691
SHA512 f306c972f67f01d70b4c5ab3a6357950efa69e87c17552207d74cb8e1f8a78847ee6b309c2c577086ec348c64d861f110f9b9496a04f55ae778c935363b538a9
SSDEEP 48:YM+s6OZTlBdHWnypFQs+v3GditDxw7D8Re1xESk88Z07TBawihgdqBG7n+uiqep:q029naDE7g8ZYoWn+rXp
TLSH
T1E0A199172A2C29FE54FC27D284146C160D3B666A19B5009CAE77EEB20FF85B8301B5DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

admin_audit.jsonl.head.tmp.4824

Path C:\Users\Admin\AppData\Local\Temp\TestConfigSaveSpamHTTP1990521752\001\admin_audit.jsonl.head.tmp.4824
Size 147B
SHA256 61e0b88ac564dc3476c6f4ef92c0148688ed7acb94e1c0f330fc917b4f33f6e0
MD5 a21beab34dbe7824fdd354764832c3db
SHA1 e69fb55a3f44140ef8d163b7343907e5175436fc
SHA512 2af9d081977d623a65eed6131497b51585f5071132389f6185304a56a9987d6c26c91f043cb63f06a4f65577cfe48224ee44984dd2e5f93293302cba4a6ddce9
TLSH
T17DC02B9F88183413173D0427D0B07030983C63F4414CA85C726F140624C541EDB04F3C
MD5 SHA1 SHA512 TLSH

Submit Download

pending_changes.json

Path C:\Users\Admin\AppData\Local\Temp\TestConfigSaveSpamHTTP1990521752\001\pending_changes.json
Size 4KB
SHA256 915ff611e53d31ed420371f3359bda4106aa9b5ce28dacc4ff5cfeb8417d2518
MD5 a47db3e3fbbe97ac6ac0844cb468d48c
SHA1 44c6b92cba6330e5596c0d80af6ce277aa779bba
SHA512 b4889e96f65c8c3536840730ddf7a5c2ba376ddb77e496b467912f836c4ded91e5066d08ba9e7e360d1839502a1b413709350c22b98511cbf4c15010a47370eb
SSDEEP 96:TntLYjNSyBSNSQMa66NS7l9NSLV5NSVBfNSkKENS+tvWNSrLlNSVLB3NSbGlNb7/:jSjNSMSNSQR66NSp9NSp5NSDfNSBENSV
TLSH
T1A2A1A79DE0751CF7258E3872151A02926620525B0D993F2A3B8D418D0F7E90F97BBBBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

state.json

Path C:\Users\Admin\AppData\Local\Temp\TestConfigSaveSpamHTTP1990521752\001\state.json
Size 16KB
SHA256 b8de6188128faf5879a0e2c5024e998b862d7a99ed329451ef4f5bcb5d15a8b5
MD5 a5c6377fa11be46a47744bbee1d7ecc9
SHA1 398b3de48c7919f39b7790f8454cd9a915491189
SHA512 f02efb40cf15222e1b097be5cbaec6024e8e08b93b4b8f6aedf628c1905e8d9e14e6d8465ddbfb7ccdb44a6d38bf681cbba3abfedf2b9e96e7450740bbf1ba6d
SSDEEP 384:QCJz/hPjkUAvRhu8kkW32ur5GLSG30n82azGIkw6o0qtS2ZfJkal:Qg/cRhYn82aAw6o0ixJku
TLSH
T12972EB02C9241DF621D5E92ADA7D870302248A530D5A7C2EBA1C4B9C1F4D77F72B6DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

state.json

Path C:\Users\Admin\AppData\Local\Temp\TestConfigSaveSpamHTTP1990521752\001\state.json
Size 16KB
SHA256 8ed4c701a7932303ba4fe6beb83b635dbc5d4d4f5117519e5097011bee962a76
MD5 9a9de5b0c8bd08cf91787f3e3b252890
SHA1 6cd6ef08a7e56d12dd914431402ca9aee14c67f2
SHA512 7614749196b6b815967f7426a44a599103f73206df166be6af8e4f05c7f195abbdb88a22d119deeb1a06c3b9c8cb1b59b283ccddaa12f91b737cf6d2f4ec97d5
SSDEEP 384:QCJz/hsjkUAvRhu8kkW32ur5GLSG30n82azGIkw6o0qtS2ZfJkaw:Qg/5RhYn82aAw6o0ixJkb
TLSH
T1B172FB02C9241DF621D5E92ADA7D870302248A530D5A7C2EBA1C4B9C1F4D77F72B6DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyAuthGate2648919592\001\.statekey
Size 32B
SHA256 89b590ddd84ba0ccbab4a6b7d298efe91ed854f449728e74fb6025f53b26663b
MD5 e5526773ce63b5405220c93a3e5f95c6
SHA1 ef114248f26099648701b9fc13f501b044bed920
SHA512 bb08143f34b554843d12e85bcde91203136fcef8e0be90890261beeb6a1ab9620a1c2d6de2e8da06e9ecf496d5baae8aaaf143ced74b3890cee84c0542692a99
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyClosedRoutes3646132046\001\.statekey
Size 32B
SHA256 cf9eab3ff0006f46c4e190ea59f0fe5faa5b7f8c281f4bb4b57ba37a3bc5406d
MD5 f0a9d841bbf310e5be98d6d84685d39e
SHA1 81475ba5876bb2b4f60b30db6c8700a5b999763d
SHA512 6140fe094703038be0a1289f94d751da5d30714a3eb11f5fa4510efdbc988740b5bb4f5de2bb554fcc755c1f0154934d092cfb5c6f5cff9699111ffb3d6e4d72
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyCookieIsCanary2228265179\001\.statekey
Size 32B
SHA256 21a3f35751187496e9728cd1335c7bd37b4ab078062119bd14b1c5b095015499
MD5 51d4b21fadac74a391b20d1506a28175
SHA1 2d50308dbe13b62fd747efb269d7312b7f997e7f
SHA512 b474d948a2b5859b2416ecc83f772ab0675d88b13db2e7313ca1ed7fbb3002b00a1d55d38164970eadc484b7b04814023e690d93353585441d51dca10dd3f419
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyCredentialBoundSuccess2046490898\001\.statekey
Size 32B
SHA256 b0ccb92e44795bcd509d8d7fd1507f3ced01b10b0bb8bc4ea25e187aea6bb55a
MD5 426317e0bb117f2a61097bbc4d8f26ef
SHA1 589332c69bc3d0c86518578dd794f1ec6ec21d0e
SHA512 aa6faae424c67b7489cbf1a25eeed1f4a37f061d5365b4b1ce3e72699bc7a2260d24041c31f667f633cb3fa6dbf49b4cc724cf20a9bc7f8cbe5dfa2ed29c737d
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyHoneytokenAssets2776190630\001\.statekey
Size 32B
SHA256 8cca20baf30aa3bad2b6f151d424529af7b875e439195c480845a713db441d3a
MD5 3d0a69f3f7c9da7a2acf67d60e2a708f
SHA1 d8516b397c96ef903052c02ee0dae074d7d09e5e
SHA512 2085400e5d62badb1b97b4d20333754e46194e1d1baf253474af2af5c524e9edaca60d6f09da8eda3c61001011db77a9a56db96ce79a1ae2d12083d685c1645d
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyInfraHarvest2899188799\001\.statekey
Size 32B
SHA256 c96fa41898a4b8737dae3d128ed53f8775f6a1f58b6d1c5b4da8abb0269ea1c9
MD5 f52fb60a77fb00f5afb545a9f04dc948
SHA1 ea623e8b49e3c91e379eff93c3ca441f188f1144
SHA512 16afde090d890a2045bf668de4518886b7dfa816114dda8ecc10be3fac1fdc33db8e7406ad9a9c71eb516807cd911e02c79bb6b690347f3cedfa81cb924139ba
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyIntelSanitization2258113551\001\.statekey
Size 32B
SHA256 c7a3569b20e1f57bbc323f7193f3dbcbb8f2dbbfd92f254a57ff74e6ac5963d6
MD5 09d3f1e501e2cab1ec83207e08651020
SHA1 6ee4a1ef2b43051e074d23628a5ac0502aea01ab
SHA512 a525c6f0af4c001ed5f96ee29fccf7685e414726d4d98fc80eb199e183e31663cf8d969cc70df6afd242deecbe61aaf829dfb925d5858387442b86720f6f3204
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyPerBootMetrics3791457894\001\.statekey
Size 32B
SHA256 fce9ead84928199a045b4a2d26568adfa65b7b73bb8b457876166d0e408c9672
MD5 c6ff5ab43d7f8d60939cf97d1d3a0253
SHA1 70527c4c8c00a9406e9f5ebace3d7f907c2d441c
SHA512 66479b07c817ebf12ad8ebe9c7d8f5ea29c9ec3e8725b15eef5e0fd69be72c50f6ad74c2bc6d25bda590f9be3e78fb14b67e8c470ba0ff197a6076884c5d6958
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyScanAndSupport1883279275\001\.statekey
Size 32B
SHA256 3ed092ee604fba1c639fb69cc9e7621d7edf365c12bf66e0a84910cfd406c4b2
MD5 9df3000bc29e4641453f43c864c70063
SHA1 80b0533bc9acbf0edae40d1f41bbff77809ce9fe
SHA512 95b5c35f0d8f3590aa526c4f19b54f450464951a0e6e4a30985268760bb265360a6df2e9920405043cf7b6d37e508ab4d34be12b6cbdf052114711a916964dab
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoySchemaUnified2650194720\001\.statekey
Size 32B
SHA256 93a4fd6f780430a5be8d1d341779e3c1a9e7fdbfbb1d6332ef941b4a4d47c931
MD5 43fd32b435d5d2b8f221429a865ff8ee
SHA1 42a4bf42239461735cdcc46074a1c45a16a1232c
SHA512 2f16eb3d8bf037d7b044aa70cb40f663c1a03762381a111030f69d036e82776e66a33e453d5b551b95b07170fceafa1840ce86debb83a024c77355d12a37292b
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyStatefulTheatre3088269947\001\.statekey
Size 32B
SHA256 73a33b2d182bb649f0f328802b069bacca141415fe2d5f7e5517b5dd3ffe8e21
MD5 08b682fde5154a66ddd121dff630fa95
SHA1 ac4b3d5561b67a5dc6621e4a22a8e184aeb88504
SHA512 cbd0adc8d51423e9012fc5a3451e0e54e9b5e0b7264737b382396c3869961c5aeca9f8f8a4f34d62253ea72067ce1cc66211fe311fea872ba913523ddfed0430
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyTarpitOff1538362197\001\.statekey
Size 32B
SHA256 cbaa7388e76dc59aeb504b2fd3b5a3bc01bab08fecf3dfe6dbee5e1fb5d2e860
MD5 fa70fbf47a0f9ea13561296b5c3e2acb
SHA1 bb26bcb5b5f570c51db5fda7b60c68e1ae417784
SHA512 fe82fcd0ae82280972cf68ccc0d1446d76236e39d911c53a2bde38a59c6e8394d7e8af59dfe2887ce695ccb90ad06eda32e0fe9b32be0b52e2468676828badb0
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestDecoyVerificationProbeDetector1943012486\001\.statekey
Size 32B
SHA256 e205377ef499021d542d15fc53bd3a298340744fe56fba8159d3699c563ec2cd
MD5 744df6ab87bc03535cb49d32eb00fb87
SHA1 65e66a87339d6d6daaab0457059778827fb1a390
SHA512 ba13e49ce3052d8a60def0db5f02dcd889b262c9c2d4cdd2253180293c4d3a877dcdbeac314618cd5084fb30aefef34c85c4d4bb4ec52bf87ebf44f131522ecb
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestHoneypotBypassForOperator1493944927\001\.statekey
Size 32B
SHA256 d549f30443d5f0b5c6c020582aef9092fabf1fc5c528b7a16be88038716b185a
MD5 1fdd9c6bbba598f6820d769e6389c252
SHA1 7e17957712a67f8509bae03649d28eb717d47276
SHA512 688e79a344cd4ba09e2fb5e7fc909ba4dfa4d3752628343f8e880c193b9c1f76850248903c225439b2e9b2a957e1d1cbf73309537ec607cdcc6268414267bd2c
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestHoneypotDecoyIsInert2568189505\001\.statekey
Size 32B
SHA256 91e48155514b52815c93f9b9622d99333b27419cdb6f10271e341f87c459e51d
MD5 2a0d20c27656690b4e07c20fd5f728a2
SHA1 6299b8d0a29d7e8f168240f58f01e6ee49f7d2e7
SHA512 4a2bbf6009d387b5413ac03eaaedcc846a268beb417bb453cb52382086336ca91fcbdf2ab95d1d8401811035ebb0a4548c34eb415dc0375be487b87ff4c1319c
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestHoneypotFakeSuccess1718877961\001\.statekey
Size 32B
SHA256 96ad517f6169928bcb93a3624bf6352577dc70a8d948e0eb3081a72cbce64542
MD5 0914a16ec33ae364c0f553ff0ad5e473
SHA1 7583ec08fec58585ca3abf55864dba6db2ea028b
SHA512 df269210751d1acd17a720523226e47280ab7f48eae6cb30b09c3fd0a0e80b068ecdb18287aa0c89d67a4ce0a2a0d99bcf3a07efc0108c1d1fc41a926bf2432c
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestHoneypotTrapDivertsToDecoy807066310\001\.statekey
Size 32B
SHA256 c393148e6f3d14fd9d558865c4bbb72358b265e7ede70d4a50db509b4c8d720f
MD5 1b4aef1f8d3b5d9ee4ce33d8e4744d61
SHA1 83662c5b3fcbfb843becf37f2b945748760c51f9
SHA512 eb07d189288243136da09986840621e0061654ce105f1d515d088060ad50777417c29bdf6402930c0b345b043c5ebec2b29244b438a63476ea54de07f5d71759
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestLoginFlow129145681\001\.statekey
Size 32B
SHA256 fa6da6b0788e033da80e54c76145145ef4eb516a19a65b32f1fd5d9de20bf281
MD5 853fa7364c2ccc9bc620a7bb6a3e8dc1
SHA1 887ecc90ad8cef68155f8d3c7d6393af881119ff
SHA512 626d8de2b4b9dd7a94cd0baee29a35f24e983ca8a809133c8debd91dafc0f433dd51443da8723f6027ab5e5e323cc408916d822ab6d5d21246d86a557800e988
MD5 SHA1 SHA512

Submit Download

state.json

Path C:\Users\Admin\AppData\Local\Temp\TestPresetEndpoints2883821796\001\state.json
Size 16KB
SHA256 f77a9ece430df4c328dca3705679ac09539be67a74d3b1e739e9b0fb7d3a1773
MD5 191e71a906dfa73d4756517f278d134d
SHA1 a2ae11783f765915617a58064c00e72053eec070
SHA512 7abdca222e208d418523cf3e8d18e00c777428655982cf72ce6be832348eee7de104da877a31e01e5be5eda601db92a55b2aa984b9c4fcad8836ee2e48b0abd7
SSDEEP 384:QCf8/OJjkUARRi88k8W32ur5GLSG30M82lzGekw6o0q/NIH1JZa0:QF/lRiuM82lIw6o0CAJZV
TLSH
T157720C02C9381DF221D1E92A96BD570306349A530D5A7C2EBA1C4B9C0F4D77F72B69EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestPrivEscViaLegacyPassword3295613539\001\.statekey
Size 32B
SHA256 5d732f2f3b123bef95d360dce676f9a64357a5dcdf980bc2fc1ed27b8f1550e5
MD5 c2245c04f704a7353190339372c21a1e
SHA1 8b5fa9449dabc5411563759c27b2952a0857a59a
SHA512 54c0aaace4a78bed9922aa50754b3dcad28ce6f50adf234fc03364bcf4db3b81a1eef82bc0b5a999f8259b326a7578dedd4026113bf4e648d17a26092480555c
MD5 SHA1 SHA512

Submit Download

state.json

Path C:\Users\Admin\AppData\Local\Temp\TestPrivEscViaLegacyPassword3295613539\001\state.json
Size 16KB
SHA256 6aab68e4a51757c05c2f500da1345b3d4c94d7a5e658d658f41b942e8cb5765f
MD5 1c92065db977bb1a48fa648bc7f59ae9
SHA1 94178735ea89825013731d5911de4a76ed95d05a
SHA512 f32209e48c1b3c7dab8bc4a8a5705f6caab57168c35d9d0f994e6fc4ff8aab8cf3c064d26f6984d1cf3cc39385d79f84231342bccccb55df9c1eb80623eadebf
SSDEEP 384:QCJz/hJjkUAvRhu8kVW32ur5GLSG30n82azGIkw6o0qtS2ZfJka+0:Qg/iRhbn82aAw6o0ixJkC
TLSH
T16C72EA02C9241DF621D5E92A9A7D870302248A530D5A7C2EBA1C4B9C1F4D77F72B6DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profile.json

Path C:\Users\Admin\AppData\Local\Temp\TestProfileStealthEndpoints3802958139\001\profile.json
Size 48B
SHA256 13fd73baa9c41d2868efaf4f1fc53402d339e412bda76b8ee509174076d513ba
MD5 bf69e7e5d91ad0911e2ac8280023ad6c
SHA1 5403b04d5b2086fbcd07b8a6b6e811ffdcf2e8bd
SHA512 c4d291f556d2f39dbe1e2dbe1c82ec76af1b5fda2ff07116c8565d8287a871dbddd6c4b07eee484749a310e89ced9e5a485c0002d033f3b4a4c9ac090fa71ac3
MD5 SHA1 SHA512

Submit Download

profile.json

Path C:\Users\Admin\AppData\Local\Temp\TestProfileStealthEndpoints3802958139\001\profile.json
Size 49B
SHA256 583ef493052f33ccffd08772250b3b1411ca23d9497782d1d2fb6af4474635e4
MD5 577970c01b4d986d00b0e05d1986f33f
SHA1 ff51e79e592c232ca688cab7ab1137cbf2691cc8
SHA512 4ad29dcb363052ffa5e3e122fe29dc388e9795c266b09bb9578e1e5c31b1d0d636974411a8510765e73d1dc2fdf25fdd66c3aa504c002d4b4f599bcc7d22aa7d
MD5 SHA1 SHA512

Submit Download

.state_signed

Path C:\Users\Admin\AppData\Local\Temp\TestReportSummaryNeverLeaksAPlaceholder3600502378\004\.state_signed
Size 25B
SHA256 e5e0d5b5ff93afaf1969fa0cd1629e2fd7a14a7e576ba17eb3f53f14068e7f3b
MD5 c7ff1e8bc7958ce77a9270e170be4efb
SHA1 4845ed749d37e632fe496b27e04b7def1a742a81
SHA512 9076c74542704ce2f6ca9c2dec305cbf37809f085bf16933329ea454318b7b8e57b0436cd1dac7cf3e3c00b0661537b8d45a73b914394bf3315d30de7adc2a71
MD5 SHA1 SHA512

Submit Download

.state_signed

Path C:\Users\Admin\AppData\Local\Temp\TestReportSummaryNeverLeaksAPlaceholder3600502378\010\.state_signed
Size 25B
SHA256 4c0b7eaadf577a5662e6b4f89e4884614422a8044c898b4bb70bbb8bebc6e7f1
MD5 006644f811ae1dbdce19576d3cebf35b
SHA1 32ea74a83045b7db1fa9b39952c6ca489d3564e5
SHA512 52afe03819deb503cc1454c36f1a0fc5ac6b650540106a5f32dd22065913bbc37f6fc0466488e07f265226edcfe7ff1107de693caf073df0d8195c2c2b996b3a
MD5 SHA1 SHA512

Submit Download

.statekey

Path C:\Users\Admin\AppData\Local\Temp\TestStateSnapshotEndpoint1883290421\001\.statekey
Size 32B
SHA256 ea17a5d3e5bc3bf8ce83d13be70d0db8755a19f27432e70a02e4906118b4a855
MD5 4766270a6895344dc3dab297dbf15168
SHA1 cad9b0cc3c51c866f7d754d7fda432de5d0d7f90
SHA512 c0bb029a4c8c162da315ecefca7af8436ad3a9fde54ded052da90b89eff554361455f45ae32bba737c0a748998e3c4f855c4121445b6c3a01618f7bcd8aec8d8
MD5 SHA1 SHA512

Submit Download

blocklist.json.hw

Path C:\Users\Admin\AppData\Local\Temp\TestStateSnapshotEndpoint1883290421\001\blocklist.json.hw
Size 96B
SHA256 ee08d294c639d0f36b57f9fcb2e8d6523bebeaa7f105610ee9e4925f367ddfd2
MD5 416658914c937332a034632128e7526e
SHA1 ca5edd9d493287ae0533b2e336bafde34ae5daf3
SHA512 fd07e405270ed22fd88c1024625bb87bfa207306d61d0abeb777331845f1eb964e1304a31b56aa872ffdfe4d3e31764431fb6ed9d9271e466b54db6bacdb28fb
TLSH
T1BFB012A51100212BDCE0E11701C60F1DE00A985C3FA93C15826808C418E4649A31C9CC
MD5 SHA1 SHA512 TLSH

Submit Download

profile.json

Path C:\Users\Admin\AppData\Local\Temp\TestStealthCoverNameEscapedInHTML3722362841\001\profile.json
Size 61B
SHA256 017c04e71483e0c0f580830512796fb9269485bbeddd8c3453ae194b0ec95e21
MD5 7312e937b433e1d65e8249e975e6d37f
SHA1 d89d038dd9d1c27fd23196691ed01e97f899dcd0
SHA512 68afa4e1cc1069c49bec1d1168c18f224749acabbd64e560d4a64fda683c3d62a10404b768d5c82264cc2218da8f1af201e6f11dc908f5428f4cb9b67b1ba1d5
TLSH
T1EAA00210FF18873296B14202046EE50F6A145D295A4194151CDF5A0683047A91812440
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads