de6986cd4c5405bff52154e08665be736f9af4cf6aa30f6c33932ce0a07578b7

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 19:06

Target
2026-08-01_e1c7540a507397a816cc695397fffcba_cobalt-strike_coinminer_dosia_glassworm_hive_icedid_luca.exe
Size 14.8MB
Sample260801-xsaebseq2w
SHA256 de6986cd4c5405bff52154e08665be736f9af4cf6aa30f6c33932ce0a07578b7
MD5 e1c7540a507397a816cc695397fffcba
SHA1 42a3b08dac47aa906f95a3a4907ec36874e6e933
SHA512 4413eb1d048e0380c30edebee0347331f33c2873c33c1e11069e9b7b4f57d280428fce9e0788cb6b2ed5e3a76b45e93ce2f4521ca5abc8c29214dace8f2355fb
SSDEEP 196608:y+5Di65sVf2LHhkY7AT1tmFFF1GZoXa3do9:yoDi65sVY8T1tmFFF1GeXa3do9
TLSH
T10EF67D47F592A0ECE07AD1708666E2B3B670B854073467D72B90E7B52F23BD01A7A734
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
behavioral1/memory/940-0-0x00007FF7B37B0000-0x00007FF7B4C4A000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral1/memory/940-0-0x00007FF7B37B0000-0x00007FF7B4C4A000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/940-0-0x00007FF7B37B0000-0x00007FF7B4C4A000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-08-01_e1c7540a507397a816cc695397fffcba_cobalt-strike_coinminer_dosia_glassworm_hive_icedid_luca.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-01_e1c7540a507397a816cc695397fffcba_cobalt-strike_coinminer_dosia_glassworm_hive_icedid_luca.exe"
1⤵
PID:940