General
- Target 2026-04-26_7fe83c497e0bc063ea433cd017943eec_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_remcos_salatstealer_sliver_snatch
- Size 6.7MB
- Sample260426-s8ea1ady5l
- SHA256 20b644ed96480bef72bf5ad6704bab250eee842d6842dcbf6e2dff97287bd5e6
- MD5 7fe83c497e0bc063ea433cd017943eec
- SHA1 d5061e5a57b0467b19a94b298f122ea2283336c4
- SHA512 7e98ed1b784019072b08046d980f67ecb8f57e5cd4a2d83af3ff73f5051b952f9a83db4111e8579a5dbff3cab78cebfe9a7fa9f45d0e212fe19bb7c6f437c785
- SSDEEP 49152:g/5n5Ot6hWBOYKq8lWgb/THmEHFrzR7ZFetiA2eJcgaEGFcXO8Fm9jsirBYMwKeU:g13tfXGERTeB9rY+eEo
- TLSH T135665A07E8A555E9C0AEE63489629253BA717C485F3127D72F90F7382F77BC06AB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-04-26_7fe83c497e0bc063ea433cd017943eec_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_7fe83c497e0bc063ea433cd017943eec_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_7fe83c497e0bc063ea433cd017943eec_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_remcos_salatstealer_sliver_snatch
- Size 6.7MB
- SHA256 20b644ed96480bef72bf5ad6704bab250eee842d6842dcbf6e2dff97287bd5e6
- MD5 7fe83c497e0bc063ea433cd017943eec
- SHA1 d5061e5a57b0467b19a94b298f122ea2283336c4
- SHA512 7e98ed1b784019072b08046d980f67ecb8f57e5cd4a2d83af3ff73f5051b952f9a83db4111e8579a5dbff3cab78cebfe9a7fa9f45d0e212fe19bb7c6f437c785
- SSDEEP 49152:g/5n5Ot6hWBOYKq8lWgb/THmEHFrzR7ZFetiA2eJcgaEGFcXO8Fm9jsirBYMwKeU:g13tfXGERTeB9rY+eEo
- TLSH T135665A07E8A555E9C0AEE63489629253BA717C485F3127D72F90F7382F77BC06AB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory