81e10e83d4334bd5cc41293c16aaa445c756a755a22a5fcdbe265aef5ceafb83

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 14:04

Target
2026-08-09_8d11c4feb2e32aac2b2f1f94bb792cde_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Size 33.0MB
Sample260809-rdeslssthv
SHA256 81e10e83d4334bd5cc41293c16aaa445c756a755a22a5fcdbe265aef5ceafb83
MD5 8d11c4feb2e32aac2b2f1f94bb792cde
SHA1 fcbe7cdff2053538802fffeddf6061f224101e26
SHA512 48f0d5bc2857e1bed2b058c82dccbc1490a907728d9617077bac52c61caf49f99fcd02d50e7a73b934a29ddd428b3e24fcc783c4d5f86d03b1373973b039ed29
SSDEEP 196608:SHXewg2UmSNzB4KQ2hRluZ4JbD1qpuXfHbYT:S3ew0fO+uZYNT
TLSH
T1E6777C17F96441E8E4AED534C976A1627B757C894720E3C72BA4F6202B73BD0A9BF340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
behavioral1/memory/4456-0-0x00007FF683E90000-0x00007FF68791B000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral1/memory/4456-0-0x00007FF683E90000-0x00007FF68791B000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/4456-0-0x00007FF683E90000-0x00007FF68791B000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-08-09_8d11c4feb2e32aac2b2f1f94bb792cde_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_8d11c4feb2e32aac2b2f1f94bb792cde_coinminer_dosia_glassworm_hive_poet-rat_quasar-rat_snatch.exe"
1⤵
PID:4456

memory/4456-0-0x00007FF683E90000-0x00007FF68791B000-memory.dmp

Download

memory/4456-1-0x00007FF683E90000-0x00007FF68791B000-memory.dmp

Download