4f7d9484137046a39bceb0f2577ee2f0fb4cfda5048b6be3bea26a8dce8c788b

Analysis

max time kernel
150s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 13:00

Target
2026-08-20_316ca5183c9f3f16dbff73b062fa828f_coinminer_glassworm_hive.exe
Size 3.9MB
Sample260820-p8s8daxeqe
SHA256 4f7d9484137046a39bceb0f2577ee2f0fb4cfda5048b6be3bea26a8dce8c788b
MD5 316ca5183c9f3f16dbff73b062fa828f
SHA1 ffd967e9a1c4bb99a586dbef4896e764880ecd86
SHA512 d0c593eaaa13486b0cf1d7c9af2e588456ce8f14f11e746dc47705bbfd5c00039926da34aa4bfe57f663d5e52d46f2f7df05c1557be30311235cbcb76fdfb0b1
SSDEEP 24576:TB2yvN045vAXjqZQxceJYqQ0wQporFnyXBEP7dbrKEAXJt9dPtWwlb5Pwh8ivTGW:TBtvO45vAXjqZQxce3wQCrAKbr439p
TLSH
T1A1164B07FC9534A6C4AAA236856265527BB07C893B3163D72B50F2FD2F7BBD06978340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

Detects executables referencing combination of virtualization drivers 1 IoCs

resource	yara_rule
behavioral2/memory/3472-0-0x00007FF70A180000-0x00007FF70C4CF000-memory.dmp	INDICATOR_SUSPICIOUS_VM_Evasion_VirtDrvComb

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/3472-0-0x00007FF70A180000-0x00007FF70C4CF000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3472-0-0x00007FF70A180000-0x00007FF70C4CF000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-08-20_316ca5183c9f3f16dbff73b062fa828f_coinminer_glassworm_hive.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_316ca5183c9f3f16dbff73b062fa828f_coinminer_glassworm_hive.exe"
1⤵
PID:3472