eedab35ed65db30fbb98c7a01d118e7a5c20258ae76f222786f376a97587080b

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 01:07

Target
2026-09-29_522e80e394f0837de1b64c6916b1c473_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_snatch.exe
Size 16.3MB
Sample260930-bg4cdazybv
SHA256 eedab35ed65db30fbb98c7a01d118e7a5c20258ae76f222786f376a97587080b
MD5 522e80e394f0837de1b64c6916b1c473
SHA1 8940a84abf9a0352e6cf01b262be4b756ec301fb
SHA512 d58f197ca051f1b15488543303a9a05e7d9d28b3f83be3e063dd73c77aafe37e5538443882cad10381e0cfcbe80fcd1bfbf2c3afe5a371b39e0d60dcdaf6806e
SSDEEP 98304:7EtSkSzua41H74mAeBKQ+yGZR3RvC1a5/jvfVZ5E/B66C2+3r0ad+ZrQE3:7EtS9aH74ReBK9ZaQj5EM6Mnd+xp3
TLSH
T11E075B07E86201E4C5BDE634C5669353BB707C895B2127D72F60F2282F76FC0AABA754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

upx

UPX dump on OEP (original entry point) 2 IoCs

resource	yara_rule
behavioral1/memory/4664-0-0x0000000000410000-0x0000000001454000-memory.dmp	UPX
behavioral1/memory/4664-1-0x0000000000410000-0x0000000001454000-memory.dmp	UPX

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/4664-0-0x0000000000410000-0x0000000001454000-memory.dmp	upx
behavioral1/memory/4664-1-0x0000000000410000-0x0000000001454000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-09-29_522e80e394f0837de1b64c6916b1c473_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_522e80e394f0837de1b64c6916b1c473_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_snatch.exe"
1⤵
PID:4664

memory/4664-0-0x0000000000410000-0x0000000001454000-memory.dmp

Download

memory/4664-1-0x0000000000410000-0x0000000001454000-memory.dmp

Download