General
- Target 2026-05-06_e7fa15880f2c3d4c50c648e040b0616a_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch
- Size 14.0MB
- Sample260506-rt82dsg19l
- SHA256 2c62db749827145fb8c15cb8244411b6c37a4ebf584a4ac1853404df7c0f7ebf
- MD5 e7fa15880f2c3d4c50c648e040b0616a
- SHA1 6aa1183b72660823f4b8e42ad8910c16280d26c1
- SHA512 fee6a4b39a980796cf2d78f65d3e6fe95c815602712d052fd087fb43e93b7f63706875a8515d30675c892bd132db2aefafaffe889246d470efe5d6efdeb24c84
- SSDEEP 196608:ox5FHoxhjhjJzL+oYFfBnWy8siwLgbmmT9NIHn62uPKwdpp5+B:gnujhjBn+JWyzibqmT9NIHpW9MB
- TLSH T1D4E6E091FDDB50F5E903193045A6A27F27302E095F29CBC7DA507F6AE873AE20A37119
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-06_e7fa15880f2c3d4c50c648e040b0616a_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win10v2004-20250619-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_e7fa15880f2c3d4c50c648e040b0616a_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
laplas
C2
-
http://178.208.87.49
Attributes
-
api_key
bfc588c900dabd10b9a04bc8bd1c55c5dc8c73b3c92867a9918b7895454c25b2
Targets
-
- Target 2026-05-06_e7fa15880f2c3d4c50c648e040b0616a_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch
- Size 14.0MB
- SHA256 2c62db749827145fb8c15cb8244411b6c37a4ebf584a4ac1853404df7c0f7ebf
- MD5 e7fa15880f2c3d4c50c648e040b0616a
- SHA1 6aa1183b72660823f4b8e42ad8910c16280d26c1
- SHA512 fee6a4b39a980796cf2d78f65d3e6fe95c815602712d052fd087fb43e93b7f63706875a8515d30675c892bd132db2aefafaffe889246d470efe5d6efdeb24c84
- SSDEEP 196608:ox5FHoxhjhjJzL+oYFfBnWy8siwLgbmmT9NIHn62uPKwdpp5+B:gnujhjBn+JWyzibqmT9NIHpW9MB
- TLSH T1D4E6E091FDDB50F5E903193045A6A27F27302E095F29CBC7DA507F6AE873AE20A37119
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application