General
- Target 2026-06-27_11049be8b3213e64d06736ee54ab5f5f_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 12.0MB
- Sample260629-lzpxtact9l
- SHA256 9f4de2d0c610e43c121b92c4d931136224fc86e9f95a95093268cf7ec00fdf3d
- MD5 11049be8b3213e64d06736ee54ab5f5f
- SHA1 243b51d228d6523246d0ce96972497af4047637a
- SHA512 4bf7a29744ccdf633a7aa63c0e45317508a6efe757fefe599e7b4482a429841e09ef5996be3565fc0fd052d7b18552362787bd86d4351ffcb4cb2f8e5d708ec1
- SSDEEP 49152:TRt9bfxyvdNY9qGAPyKXrxqmrhF2nj0d2Pqd/SIge6oFaE011ydGb2NsWsLjMunp:T9jxOGAa2rDvzZFC2Nnm47+Ee
- TLSH T198C65A11FADB95F5E9035831406BB37F23315D048B28CB9BEB547B2AF87B6A10C6A345
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_11049be8b3213e64d06736ee54ab5f5f_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_11049be8b3213e64d06736ee54ab5f5f_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_11049be8b3213e64d06736ee54ab5f5f_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 12.0MB
- SHA256 9f4de2d0c610e43c121b92c4d931136224fc86e9f95a95093268cf7ec00fdf3d
- MD5 11049be8b3213e64d06736ee54ab5f5f
- SHA1 243b51d228d6523246d0ce96972497af4047637a
- SHA512 4bf7a29744ccdf633a7aa63c0e45317508a6efe757fefe599e7b4482a429841e09ef5996be3565fc0fd052d7b18552362787bd86d4351ffcb4cb2f8e5d708ec1
- SSDEEP 49152:TRt9bfxyvdNY9qGAPyKXrxqmrhF2nj0d2Pqd/SIge6oFaE011ydGb2NsWsLjMunp:T9jxOGAa2rDvzZFC2Nnm47+Ee
- TLSH T198C65A11FADB95F5E9035831406BB37F23315D048B28CB9BEB547B2AF87B6A10C6A345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.