Analysis
- max time kernel
150s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/08/2026, 03:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe
- Size 17.8MB
- Sample260819-ecafaawcng
- SHA256 42285dc84e1278aae9352b33c1269752afd8d86c394793f211c75e03143eb779
- MD5 f60e4ac71671e7d9e6ec28b94261d5b6
- SHA1 7302ed7fdfde6573fcbd2c3c7e51a8f1b5b4969b
- SHA512 565da8a5b2778354e3402dc86ad107c74ac30ac023540a7acfac5fbea47bc8dee293dc50542cff5aed3e8cb7cb5197d35d456fb8dda44f8989adf57ce0837240
- SSDEEP 98304:sqbRyh5yNJN8ZfSGIVR5rBViDEFFUjwOffiHTSS39GQJz7VvZMeOQAmTJhQRmEbT:sUynyNqIjPqaTvauebT
- TLSH T174173A03D95A60D9C699E270C5767123BB753C0D933163D71BA0BA262F76BE06EBD320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe 3428 2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-19_f60e4ac71671e7d9e6ec28b94261d5b6_coinminer_dosia_ekans_glassworm_poet-rat_quasar-rat_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3428