7c2b99274c7e33161926a3912f5eac77f195590dd31b19eddcabe68a07dc8f89

Analysis

max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 10:40

Target
2026-08-03_9980dedfc778fcd9a0738eb1e61d2a7b_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Size 32.6MB
Sample260804-mqtebahf96
SHA256 7c2b99274c7e33161926a3912f5eac77f195590dd31b19eddcabe68a07dc8f89
MD5 9980dedfc778fcd9a0738eb1e61d2a7b
SHA1 93bd8b97ba0a52d0fe400b6bec1fcb3be8e9a33a
SHA512 15e8d08992917d918dc6b2f365133f9b763ece1890048af3d8db3a891b8da889960b38be0c0130880d42e52acd197d31ac68e58fd02c41cfba1efa58f52d0265
SSDEEP 98304:lEM62rumRFWepWy0kW7J/dZPC75cFbIswE/VEdWJChAD8tuwW7IY+pD3zPT7CJ7Q:mG6go5J/dvdIzUEMJCh6TUDH+KbMCtr
TLSH
T1A0778E17F86440A5E9ADC236CA3A95137BB57C89473013D36B64F6622F73BD0A9BE340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
behavioral2/memory/5816-0-0x00007FF612A00000-0x00007FF616444000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/5816-0-0x00007FF612A00000-0x00007FF616444000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/5816-0-0x00007FF612A00000-0x00007FF616444000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-08-03_9980dedfc778fcd9a0738eb1e61d2a7b_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_9980dedfc778fcd9a0738eb1e61d2a7b_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe"
1⤵
PID:5816

memory/5816-0-0x00007FF612A00000-0x00007FF616444000-memory.dmp

Download