56d09db054aff4fe3d5824acdadeebb5014041dac5dd34ac2d0cfc41e33c23f6

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 17:09

Target
2026-09-30_2839bcaa869ebc9173ad717c2dbc424c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Size 9.5MB
Sample261001-vpd71a1dnb
SHA256 56d09db054aff4fe3d5824acdadeebb5014041dac5dd34ac2d0cfc41e33c23f6
MD5 2839bcaa869ebc9173ad717c2dbc424c
SHA1 0904364930e50317d5ba7a7875859446e04254ff
SHA512 3c20f7d014672c4e4e21617b751fc82e6c845237649100a3836c504ffed7e497c2dec07de35a1c7ffd5b1f4688052883b1d0e0fce7371f0c24ffdcf286266546
SSDEEP 49152:2HLspmF+BBFh+FIFBcTv37CGUrmvUy/d5yMkdBarORbvsgPQYrPjYWUiYuQp2cor:2HLBiLh4AUKx8H4HO4vSOtRtYPc0DEr
TLSH
T1D2A64A47ECA555E9C0ADD1358A269263BF727C491B3023D71B90FA282F33BD06EB9750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3616	2026-09-30_2839bcaa869ebc9173ad717c2dbc424c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-30_2839bcaa869ebc9173ad717c2dbc424c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-30_2839bcaa869ebc9173ad717c2dbc424c_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3616

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5784