General
- Target 2026-06-04_dacfa5ad4610688bc3045e73820cd7b0_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 34.6MB
- Sample260604-txadcaay8y
- SHA256 a727b07a550778d0d8897c152d522f4fb59e5267f38c0718f5e8585f47328f7f
- MD5 dacfa5ad4610688bc3045e73820cd7b0
- SHA1 7acdd221776a7a7e92895b5f1db309487816b2ed
- SHA512 30a9a11ff603f9724da0f003bdf86f4a21063c0b9197cf3e6cbb6ad9495e07a6fd1dd33885f08f60c6956db6d80c6142ddbb2a9d7644bbebceef9932fa409c96
- SSDEEP 393216:jUyfRl6XAtf70MWKPXDKa0QyDMRdj2R81:jUyX6XAtf4MhDKax
- TLSH T12A874A47F8E60894D8EDC2B489758226FA71780C0B7963DF56A0B6701F33BF25676B84
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_dacfa5ad4610688bc3045e73820cd7b0_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_dacfa5ad4610688bc3045e73820cd7b0_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win11-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_dacfa5ad4610688bc3045e73820cd7b0_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 34.6MB
- SHA256 a727b07a550778d0d8897c152d522f4fb59e5267f38c0718f5e8585f47328f7f
- MD5 dacfa5ad4610688bc3045e73820cd7b0
- SHA1 7acdd221776a7a7e92895b5f1db309487816b2ed
- SHA512 30a9a11ff603f9724da0f003bdf86f4a21063c0b9197cf3e6cbb6ad9495e07a6fd1dd33885f08f60c6956db6d80c6142ddbb2a9d7644bbebceef9932fa409c96
- SSDEEP 393216:jUyfRl6XAtf70MWKPXDKa0QyDMRdj2R81:jUyX6XAtf4MhDKax
- TLSH T12A874A47F8E60894D8EDC2B489758226FA71780C0B7963DF56A0B6701F33BF25676B84
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.