Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/10/2026, 03:29
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-28_60223774994b63791b557c8583fb5bfb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-28_60223774994b63791b557c8583fb5bfb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
- Size 35.5MB
- Sample261030-d2d94adb65
- SHA256 075bfd6d1142ccda14b24656d6bf5da55e74433a042956b3186406898311c7cf
- MD5 60223774994b63791b557c8583fb5bfb
- SHA1 9756436634d0a6c7784504e689034cdb6bd8e4aa
- SHA512 2cb386f526e925cec70dd67ddb27a48feaf32c1a7641ab9b3eb9e7867a210d8ea3585c6be870136f231b7029c11d5bb574da547985528ff2fa52de06564fb5da
- SSDEEP 196608:MFjRS5JHR5h3NEUoMJMgzvsu8SCjgFN8wkKIA2ggWDaIt4u056jw5GRwQ:QS5b5hdqSCjE8c/IIt4uSORwQ
- TLSH T133875B07F96608E1D1AEC530C67A9123BB703C59473463D73B68B6246F7BBD0A9BA704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3472 2026-10-28_60223774994b63791b557c8583fb5bfb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 3472 2026-10-28_60223774994b63791b557c8583fb5bfb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 3472 2026-10-28_60223774994b63791b557c8583fb5bfb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe 3472 2026-10-28_60223774994b63791b557c8583fb5bfb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-28_60223774994b63791b557c8583fb5bfb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-28_60223774994b63791b557c8583fb5bfb_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3472