4016dab3c637e065709589c2e9e0885e2ef0ad59bbc05f6bcc20c2336e1056f0

General

Target
2026-06-26_364aad8357bec0d900bce3569027f908_amadey_coinminer_dosia_frostygoop_glassworm_hellokitty_hive_knight_luca-stealer_njrat_poet-rat_quasar-rat_salatstealer_sliver_smoke-loader_snatch
Size 13.3MB
Sample260629-vglbcaas5s
SHA256 4016dab3c637e065709589c2e9e0885e2ef0ad59bbc05f6bcc20c2336e1056f0
MD5 364aad8357bec0d900bce3569027f908
SHA1 e00d8779490ef2e620bc8acad9b0697e2336f350
SHA512 36faa5e9cf4ff98624c5aeb9530d0f15bba8f306627e16a6c2d00e212d4f17a123d2fbee7e57e8c9b3d341b36bfaf3a8167073a8bcca40c03adb2d22d21d3df6
SSDEEP 98304:jUvermWtt/ABPqELg38w6cMqHyznPlBZz+k2qCgk1tSIuHSs4IluPCJAnOudnEhN:jUamCAByELgwrFtwqPy6CYaBEh+k
TLSH
T11FE68D07E89605A9C4EED634896692237F70BC495B3027D72B50F7782FB3BD06AB9350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  2026-06-26_364aad8357bec0d900bce3569027f908_amadey_coinminer_dosia_frostygoop_glassworm_hellokitty_hive_knight_luca-stealer_njrat_poet-rat_quasar-rat_salatstealer_sliver_smoke-loader_snatch
- Size 13.3MB
- SHA256 4016dab3c637e065709589c2e9e0885e2ef0ad59bbc05f6bcc20c2336e1056f0
- MD5 364aad8357bec0d900bce3569027f908
- SHA1 e00d8779490ef2e620bc8acad9b0697e2336f350
- SHA512 36faa5e9cf4ff98624c5aeb9530d0f15bba8f306627e16a6c2d00e212d4f17a123d2fbee7e57e8c9b3d341b36bfaf3a8167073a8bcca40c03adb2d22d21d3df6
- SSDEEP 98304:jUvermWtt/ABPqELg38w6cMqHyznPlBZz+k2qCgk1tSIuHSs4IluPCJAnOudnEhN:jUamCAByELgwrFtwqPy6CYaBEh+k
- TLSH
  T11FE68D07E89605A9C4EED634896692237F70BC495B3027D72B50F7782FB3BD06AB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery ransomware spyware stealer trojan adware persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2