7aafac40fdcf139388337115d53e1c4dd322b82efb4eca265ce1212edcd8247b

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 04:31

Target
2026-09-04_8804ece4dec807d5125718667995bcbc_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 9.0MB
Sample260905-e5q9hawhla
SHA256 7aafac40fdcf139388337115d53e1c4dd322b82efb4eca265ce1212edcd8247b
MD5 8804ece4dec807d5125718667995bcbc
SHA1 48ad57c20ff9f0f5d22150dc7d176527ef8b7b8f
SHA512 4c335b21b7b9d900c75d73fb4ac086d4ff3d4ef9fca0d287dbbf6febb5c5f64f753dbb643457de847d022f67548a0b64b8230accdfb2577ce3f257794f9a9e50
SSDEEP 98304:kMDs9NgeavhGDE6rkLH+oYeRXKYMCm+vUTaCIGWla:kP4eIGQ6rMbAemFTfR
TLSH
T124967C07FDA519E9C1AEA23189BA96127B31BC491B2263D71B50F6383F73BD06D79340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5164	2026-09-04_8804ece4dec807d5125718667995bcbc_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-04_8804ece4dec807d5125718667995bcbc_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-04_8804ece4dec807d5125718667995bcbc_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5164