3dfc94f779e09f21d51737dc207984441601b92c9ba15fc2462a72f10e87285e

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 10:25

Target
2026-08-03_a479e0b4ff7ce02c7937d903cd80beab_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Size 32.6MB
Sample260804-mgdmhattaw
SHA256 3dfc94f779e09f21d51737dc207984441601b92c9ba15fc2462a72f10e87285e
MD5 a479e0b4ff7ce02c7937d903cd80beab
SHA1 40c0192242b41c348424ae13ca2e955a3934fcf0
SHA512 896b4b042fc9bf886c366ae0bbf073f85a020c0224f6c5d741bf844cecccccaadfb8bba1fdac758c32db730cccc8f5bbe8c72afa48c5288007f2421ca3411dbd
SSDEEP 196608:PG6go5J/dvdIzUEMJQh6SUDH+Kb/KOhv:PNgad2MQh6SWp
TLSH
T128776B17B86460E4C9ADD134C67BA512BBB57C8A473023D76B64F5602BB3FD0A6BE340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
behavioral1/memory/1036-0-0x00007FF6ED400000-0x00007FF6F0E44000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral1/memory/1036-0-0x00007FF6ED400000-0x00007FF6F0E44000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1036-0-0x00007FF6ED400000-0x00007FF6F0E44000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-08-03_a479e0b4ff7ce02c7937d903cd80beab_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_a479e0b4ff7ce02c7937d903cd80beab_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe"
1⤵
PID:1036

memory/1036-0-0x00007FF6ED400000-0x00007FF6F0E44000-memory.dmp

Download

memory/1036-1-0x00007FF6ED400000-0x00007FF6F0E44000-memory.dmp

Download