Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/08/2026, 12:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-25_b7ed8240e4c3542d9b28ec596ece7b33_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_b7ed8240e4c3542d9b28ec596ece7b33_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-25_b7ed8240e4c3542d9b28ec596ece7b33_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
- Size 5.9MB
- Sample260826-pg3bzawses
- SHA256 70f910a02e9db76c9bb3ec8d6416e982d353938bba6a87ef1c89f0d618dd9475
- MD5 b7ed8240e4c3542d9b28ec596ece7b33
- SHA1 b2dff6ebe7a436818cdde3435c87b39bf8152555
- SHA512 a858d573e1a3f5a40848d532127ba44556eb8f903668b84e4efaea0a2a00db07f922ce016dcb7b9147b7c497b22a5cf526911a52dd6f9c3aaf44bbb0f49aa205
- SSDEEP 49152:oi/M2iAVCjofzQ3lIVMClFJTcKsex8byUOlQbMY5Tr2vj3ZAnGUKQK1K6AZjLHXg:oi0tsa6xotAV9cLpEAM5
- TLSH T194563A07FD6614E9C0AED23689729653BB717C884B3123D71B90B6782F76BE0AD79310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- GoLang User-Agent 1 IoCs
Uses default user-agent string defined by GoLang HTTP packages.
description flow ioc HTTP User-Agent header 7 Go-http-client/1.1 - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2552 2026-08-25_b7ed8240e4c3542d9b28ec596ece7b33_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 2552 2026-08-25_b7ed8240e4c3542d9b28ec596ece7b33_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-25_b7ed8240e4c3542d9b28ec596ece7b33_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-25_b7ed8240e4c3542d9b28ec596ece7b33_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2552