6e88fcc88133de3108f97728dd7a4ef9086e0cfcef6a9593bb6a9e537ee09aab

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 22:18

Target
2026-07-30_9d30ac841c3eb6a7901dfd93be93f931_coinminer_dosia_eternalromance_glassworm_poet-rat_quasar-rat_rex_snatch.exe
Size 31.8MB
Sample260730-18c2yaybld
SHA256 6e88fcc88133de3108f97728dd7a4ef9086e0cfcef6a9593bb6a9e537ee09aab
MD5 9d30ac841c3eb6a7901dfd93be93f931
SHA1 e9baa32a69bf056e8c0663479541fa0c73c5fe81
SHA512 8487e2d6d218da2a69b9601b1c124a27358d961301c2944029be3aacdadb3f68b2c7d921e997761aff03a06b7b1cbdfa7755f4f5505974e78ff32720c097b40c
SSDEEP 98304:FdzNAjgZsRgOvZvUtkmY4isrRIkXx9Jf1RPV+M1sKVtTXfh2TSypO3G96E:XysZsRhvUaEDJ1RPV+M1sKnrfqnO29n
TLSH
T1F4771713FDA5A594C0988231C362D5D77AA3B886472413C73ADCBF6E2F72BC054BA365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
behavioral2/memory/1280-0-0x00007FF7ABD90000-0x00007FF7AF78D000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/1280-0-0x00007FF7ABD90000-0x00007FF7AF78D000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1280-0-0x00007FF7ABD90000-0x00007FF7AF78D000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-07-30_9d30ac841c3eb6a7901dfd93be93f931_coinminer_dosia_eternalromance_glassworm_poet-rat_quasar-rat_rex_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_9d30ac841c3eb6a7901dfd93be93f931_coinminer_dosia_eternalromance_glassworm_poet-rat_quasar-rat_rex_snatch.exe"
1⤵
PID:1280