Analysis
- max time kernel
164s - max time network
159s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 08:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_47c390fe3b8c121fbda0c576fe6aa7f7_coinminer_glassworm_quasar-rat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_47c390fe3b8c121fbda0c576fe6aa7f7_coinminer_glassworm_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-10_47c390fe3b8c121fbda0c576fe6aa7f7_coinminer_glassworm_quasar-rat.exe
- Size 42.9MB
- Sample260810-khymysdr3w
- SHA256 2bb5ffcad22cfea24a1899c61f805b61325d73b5690a64da20ad75644564f261
- MD5 47c390fe3b8c121fbda0c576fe6aa7f7
- SHA1 d7efa6bb8ae19569ca660973e8317a1c8bf13960
- SHA512 275a1cd95ea445ce2b6bf01cdbc98284e356f6d2b0edaf1a28cdb1f1e0e886f017d0d3d46624d06c546302621487623e1fa941bd7bb2b3bf3e48ba9d98bc13da
- SSDEEP 393216:It7xayWWiRJx6v4HMR9MC7P32De6DsxD02oVQ/8vs:It7xw3JxC9MC7f2Z4xD0xVHE
- TLSH T150A77C5BE1A360ECD12BD074866AAB33FA307C1C41346E7A27D5DB316E62F90572AF14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 1 IoCs
resource yara_rule behavioral2/memory/4556-0-0x00007FF77B920000-0x00007FF77E5AA000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL
Processes
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4196
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_47c390fe3b8c121fbda0c576fe6aa7f7_coinminer_glassworm_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_47c390fe3b8c121fbda0c576fe6aa7f7_coinminer_glassworm_quasar-rat.exe"1⤵PID:4556