General
- Target 2026-04-20_9eba9a20009d0dbc913f8efbaa5d0e05_coinminer_frostygoop_hive_knight_luca-stealer_poet-rat_salatstealer_sliver_snatch
- Size 47.8MB
- Sample260420-q2dpsacs3m
- SHA256 dd18426581a4d2ba1bb47d133aa7436c137ff4882bd77d50fef51ab5715b3a83
- MD5 9eba9a20009d0dbc913f8efbaa5d0e05
- SHA1 2fb03d67965b992a26548d7164b856750d8e4302
- SHA512 3d7bf504c4e49c61ec26557c8e9663bf34318a41e45ea0bb9892bdf24e2d814abe2d79f1bd043c0f7100f57af8b95d9ca3d44076099ae3d54d43b336b3ebbb65
- SSDEEP 196608:GECKuyb+HF9mYhUtnvBv6+yRiAJgbgdlCu4:GEChl9JUxvdyR4bcv4
- TLSH T1CAB72947E8E119D4C4EAC274D53A811BBAA23C191F3923E716A0F7201F37BE06EB6755
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_9eba9a20009d0dbc913f8efbaa5d0e05_coinminer_frostygoop_hive_knight_luca-stealer_poet-rat_s.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_9eba9a20009d0dbc913f8efbaa5d0e05_coinminer_frostygoop_hive_knight_luca-stealer_poet-rat_salatstealer_sliver_snatch
- Size 47.8MB
- SHA256 dd18426581a4d2ba1bb47d133aa7436c137ff4882bd77d50fef51ab5715b3a83
- MD5 9eba9a20009d0dbc913f8efbaa5d0e05
- SHA1 2fb03d67965b992a26548d7164b856750d8e4302
- SHA512 3d7bf504c4e49c61ec26557c8e9663bf34318a41e45ea0bb9892bdf24e2d814abe2d79f1bd043c0f7100f57af8b95d9ca3d44076099ae3d54d43b336b3ebbb65
- SSDEEP 196608:GECKuyb+HF9mYhUtnvBv6+yRiAJgbgdlCu4:GEChl9JUxvdyR4bcv4
- TLSH T1CAB72947E8E119D4C4EAC274D53A811BBAA23C191F3923E716A0F7201F37BE06EB6755
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.