Analysis
- max time kernel
149s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/08/2026, 01:49
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe
- Size 3.6MB
- Sample260823-b868caha56
- SHA256 89193ce3105ef5e05ee71b8f1d90b5651f4e65c5bdffdd9f81dd5989868a1cc2
- MD5 b816247fc8fd23454e8123e82e2bbe78
- SHA1 eec4852a87b1d6ece1ff514f0bbcb0859ca49c8f
- SHA512 fa6f88db16a1be095072be8a71ebfd2c8061c6403ef2d9a2ddfd99c65b7830acbe58abbc4d83f544462b4137b7d3722219cc48cdc830873bf62bc1d39f7fcf30
- SSDEEP 49152:IrmPdwBwCR3sQLKB65ETQXrq6h2FVo+ICJkvM4fc:Ir4gjvbM
- TLSH T17C065A07FCA118FAC0AAA131896652537B71BC480F3533D71AA0B6B82F77BD46DB9714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables referencing many IR and analysis tools 14 IoCs
resource yara_rule behavioral2/memory/4592-0-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-1-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-2-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-3-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-4-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-5-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-6-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-7-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-8-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-9-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-10-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-11-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-12-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools behavioral2/memory/4592-13-0x00007FF7C0E60000-0x00007FF7C3254000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe - Suspicious behavior: EnumeratesProcesses 48 IoCs
pid Process 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe 4592 2026-08-22_b816247fc8fd23454e8123e82e2bbe78_coinminer_snatch.exe