1157e6087a05d02964dbfe3294e9d3973febb8398b5031e66ee1bb45b013ec9c

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 21:41

Target
2026-08-12_fbe57687241f729f851f36515268d443_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch.exe
Size 9.7MB
Sample260812-1jsfbseh72
SHA256 1157e6087a05d02964dbfe3294e9d3973febb8398b5031e66ee1bb45b013ec9c
MD5 fbe57687241f729f851f36515268d443
SHA1 3b7c5ef1c6a73d28a80a8b204d077ccb6888f139
SHA512 b44bed9d692b8dd287bbe29bbcc409e1e37ded247089aea96c46c3a03a0daeb0e87cf1c19e8d7aa0ae7ba9bcfc77b2414871172d9657757f6c8ea3d8f5cd1723
SSDEEP 98304:SLMmyWPF3kfyJPA7PpzLonVBeWdcKB7YF7C9iSnikAYdQJ7Eu:ScWN3HARonVxdz8F+0EeJo
TLSH
T1EEA62805FECB59F5F907583111ABA22F63356D058B28CBC7EB547E2AF8372E12936205
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral1/memory/3796-0-0x0000000000DD0000-0x0000000001791000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/3796-0-0x0000000000DD0000-0x0000000001791000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4888	3796	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\2026-08-12_fbe57687241f729f851f36515268d443_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-12_fbe57687241f729f851f36515268d443_coinminer_dosia_elex_glassworm_hive_poet-rat_quasar-rat_snatch.exe"
1⤵
PID:3796
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3796 -s 204
  2⤵
  - Program crash
  PID:4888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3796 -ip 3796
1⤵
PID:2472

memory/3796-0-0x0000000000DD0000-0x0000000001791000-memory.dmp

Download