Overview

overview

10

Static

static

10

2026-11-01...ch.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/11/2026, 15:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-01_889c6faf0ed2c7247f79b6b45afd8f37_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
  • Size 18.7MB
  • Sample261102-s6aj2afe63
  • SHA256 c0673d2755cc0e97ea9569da5e6886fc21186dff97bd4944fd83673086883365
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Signatures

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-01_889c6faf0ed2c7247f79b6b45afd8f37_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-01_889c6faf0ed2c7247f79b6b45afd8f37_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4900

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        download
        • Path C:\Users\Admin\AppData\Local\Temp\hbd-1347785321\download
        • Size 160KB
        • SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Local\Temp\hbd-1347785321\localstorage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        password_account
        • Path C:\Users\Admin\AppData\Local\Temp\hbd-1347785321\password_account
        • Size 40KB
        • SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MANIFEST-000001
        • Path C:\Users\Admin\AppData\Local\Temp\hbd-1347785321\sessionstorage\MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512
        Submit Download

        download
        • Path C:\Users\Admin\AppData\Local\Temp\hbd-2161198098\download
        • Size 204KB
        • SHA256 8c24b66b55bef2d89d1ac69204ec3d5d7b191ba051c7c4c4cddcd66d92575d04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CURRENT.5
        • Path C:\Users\Admin\AppData\Local\Temp\hbd-2161198098\localstorage\CURRENT.5
        • Size 16B
        • SHA256 9c283f6e81028b9eb0760d918ee4bc0aa256ed3b926393c1734c760c4bd724fd
        • MD5 SHA1 SHA512
        Submit Download

        CURRENT.6
        • Path C:\Users\Admin\AppData\Local\Temp\hbd-2161198098\sessionstorage\CURRENT.6
        • Size 16B
        • SHA256 4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
        • MD5 SHA1 SHA512
        Submit Download

        download-shm
        • Path C:\Users\Admin\AppData\Local\Temp\hbd-249864332\download-shm
        • Size 32KB
        • SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download