Overview

overview

3

Static

static

3

2026-11-13...xz.exe

windows10-2004-x64

1

2026-11-13...xz.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    142s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/11/2026, 22:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-13_d184b85fa9ba685f551750ea7dda5063_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch_zxxz.exe
  • Size 45.1MB
  • Sample261113-2bd4eahw2z
  • SHA256 f1b4da8f3a47e157618e8748c11de1219c84501391a0ad0f2f950e52c4de42ee
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-13_d184b85fa9ba685f551750ea7dda5063_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch_zxxz.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-13_d184b85fa9ba685f551750ea7dda5063_coinminer_dosia_glassworm_poet-rat_quasar-rat_snatch_zxxz.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:5380

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ca.pem
        • Path C:\Users\Admin\AppData\Local\Temp\TestNATSCAPinningConcurrentInstall4033766510\001\ca.pem
        • Size 591B
        • SHA256 9f65799e0bdd1d7e2d71b7e77c2e049b3d36eb97ee24428a81352a6bd2d189e4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .nats-ca-3912550899
        • Path C:\Users\Admin\AppData\Local\Temp\TestNATSCAPinningInstallAndConflict2203107712\001\.nats-ca-3912550899
        • Size 587B
        • SHA256 c68e75d20211c94f7c53ed78e5d7a0c8dffca274c483cb4141f52216da4d11ee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ca.pem
        • Path C:\Users\Admin\AppData\Local\Temp\TestNATSCAPinningRechecksBeforeStartper-service26984089\001\ca.pem
        • Size 591B
        • SHA256 6476d6181ef4dc594bc6583566cc9136d99665c7dd5feac3ae433b303f616d6d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ca.pem
        • Path C:\Users\Admin\AppData\Local\Temp\TestNATSCAPinningRechecksBeforeStartreplace2951873534\001\ca.pem
        • Size 587B
        • SHA256 da9225941540f27b8d79e3f623145187bf106f424edae4b87adc672038af23bd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ca.pem
        • Path C:\Users\Admin\AppData\Local\Temp\TestNATSCAPinningRejectsPerServiceOverrideconfigured3841764649\001\ca.pem
        • Size 591B
        • SHA256 8829b61b9f556229f453ccb2f9e13c1e9cbb535d78fe4abb85a5bf1144158ac9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ca.pem
        • Path C:\Users\Admin\AppData\Local\Temp\TestNATSCAPinningTLSHandshaketrusted-per-service2052038533\001\ca.pem
        • Size 591B
        • SHA256 efe0e8020780f2751772d8a94e109e030f7fd088b1123128b6481dd27a90e05d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ca.pem
        • Path C:\Users\Admin\AppData\Local\Temp\TestNATSCAPinningTLSHandshaketrusted2681630520\001\ca.pem
        • Size 591B
        • SHA256 6032d586402a86e7f1214c65c20ee6a9a6d091fb9d6b3c5e976596d1a96a4897
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ca.pem
        • Path C:\Users\Admin\AppData\Local\Temp\TestNATSCAPinningTLSHandshakeuntrusted3753260374\001\ca.pem
        • Size 587B
        • SHA256 8802fc3325da5f70e4d6d23e23b2924d4f512e71836f2907b40327c2284b0d78
        • MD5 SHA1 SHA512 TLSH
        Submit Download