Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/10/2026, 23:59
Behavioral task
behavioral1
Sample
2026-10-05_58ca398a2954c58e04c7720a6378e561_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-05_58ca398a2954c58e04c7720a6378e561_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-10-05_58ca398a2954c58e04c7720a6378e561_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat.exe
- Size 4.1MB
- Sample261006-31stjaay7m
- SHA256 ce12eb50808d62246316eba4641e1d12f06fd6f1f28eb7f544f6026da03d5835
- MD5 58ca398a2954c58e04c7720a6378e561
- SHA1 4d2553e2c145e2a605e2ea2a95ee932f316aeaa0
- SHA512 e2a9fff1a009a452fe93c0a3c7d2e2b665e54970683a74cf95e3b191f309e9d4e06ae6fcaee997b69603c8a8c5a3e1d021232e7043b655aa0d4ae548c2624e97
- SSDEEP 49152:pmxWL9uqLp1baKgoJjriknJMlwx5EdwyTXRDS36:KUEyjREqIB23
- TLSH T1ED163A17FC9551A9C0AAE234CA629153BB717C885B3123DB2B90F7782FB7BD06979340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- UPX dump on OEP (original entry point) 2 IoCs
resource yara_rule behavioral2/memory/4684-0-0x00000000006B0000-0x0000000000AD6000-memory.dmp UPX behavioral2/memory/4684-1-0x00000000006B0000-0x0000000000AD6000-memory.dmp UPX -
resource yara_rule behavioral2/memory/4684-0-0x00000000006B0000-0x0000000000AD6000-memory.dmp upx behavioral2/memory/4684-1-0x00000000006B0000-0x0000000000AD6000-memory.dmp upx
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-05_58ca398a2954c58e04c7720a6378e561_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-05_58ca398a2954c58e04c7720a6378e561_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat.exe"1⤵PID:4684