Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/05/2026, 22:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-09_17a12ca36481e9ba649254d98e187427_coinminer_dosia_ghostlocker_glassworm_luca-stealer_poet-rat_quasar-rat.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-09_17a12ca36481e9ba649254d98e187427_coinminer_dosia_ghostlocker_glassworm_luca-stealer_poet-rat_quasar-rat.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-05-09_17a12ca36481e9ba649254d98e187427_coinminer_dosia_ghostlocker_glassworm_luca-stealer_poet-rat_quasar-rat.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-09_17a12ca36481e9ba649254d98e187427_coinminer_dosia_ghostlocker_glassworm_luca-stealer_poet-rat_quasar-rat.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-05-09_17a12ca36481e9ba649254d98e187427_coinminer_dosia_ghostlocker_glassworm_luca-stealer_poet-rat_quasar-rat.exe
- Size 11.0MB
- Sample260509-2nb5ksdz71
- SHA256 e466be37da5ded7c85fcccd299c7f7485bff555c363267e6725d988c2c8999b3
- MD5 17a12ca36481e9ba649254d98e187427
- SHA1 63699b0c32a4372151d66e9696a59fd89e028d4c
- SHA512 f7899e679f46929b810cebd42bccd57be8fbb55d1883f3da583f05e04e714ffa1818c561c4902b0fa5c2728b3d68117bfb9607c672f215a90bb5da6368a44d31
- SSDEEP 196608:8Z9taTXqEtkLwyCqBKH//s/jWREH+HT3p:8vtaTX/ksJqgojPQ
- TLSH T19DC67D43F82509E9C6A46171CAFE92027B60F8041B266BDB1F61F63CBD722C57E79394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10