bec2f0fe6b984879a17ad1c481343e53eda5ff5dca5378b88d9441f82f890dea

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/09/2026, 09:49

Target
2026-09-23_45548956db9b35a754cc005d583e7245_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 22.5MB
Sample260924-ltfrysys9j
SHA256 bec2f0fe6b984879a17ad1c481343e53eda5ff5dca5378b88d9441f82f890dea
MD5 45548956db9b35a754cc005d583e7245
SHA1 97b0b39db65f1a44780dd4605b5541f1f39c7051
SHA512 739bc90b836bf0befd44fd008238d523a20a0e9b9b21f8a2f2bbc63773f4bb68ac6f0da3c140b5ecc01570dc30cf4b74d754e0951b65affaac19ea305f84df20
SSDEEP 196608:yLcYlkH5owcHqKpqWDG3DPmpAFwyYWozc:ZH54dq1YWv
TLSH
T18C375A57FCA548E1D0BE9131C9669112BB713C994B3123D77B60FA242F3BBD06ABA314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4452	2026-09-23_45548956db9b35a754cc005d583e7245_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
4452	2026-09-23_45548956db9b35a754cc005d583e7245_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
4452	2026-09-23_45548956db9b35a754cc005d583e7245_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
4452	2026-09-23_45548956db9b35a754cc005d583e7245_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_45548956db9b35a754cc005d583e7245_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_45548956db9b35a754cc005d583e7245_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4452