General
- Target 2026-07-07_c8ea3e7e41cb03e2020e3a2cfeff51d9_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 11.8MB
- Sample260707-2k6j1sf14m
- SHA256 7ec69612dd8b7fc9df6b1dfe9c5aafcedca07e6ed2446b76f070f92c1eefab07
- MD5 c8ea3e7e41cb03e2020e3a2cfeff51d9
- SHA1 33bd2893fa99e5949f0c2caf6a730bdc9ea64910
- SHA512 eec0610b0ee9d9f26203ff77b2d3579545dc8371f1d265a8e9c419a891a77de6ac379854e820c0be42c108e11df4ee5e88fcd81c668320ddd911b832a6c3f188
- SSDEEP 98304:VhUONrUiZZ6reKToqn9kC+Oa3KkEjmgrlvfvkvcvjsd72+c2iTv+v4v+v3viojqd:V3rUaZ6M+jm52Tuj7g1
- TLSH T170C64B47E8A542E5C0AED176CA769253BA713C885B3063D72B90F7342F77BD06AB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-07_c8ea3e7e41cb03e2020e3a2cfeff51d9_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_c8ea3e7e41cb03e2020e3a2cfeff51d9_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260706-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_c8ea3e7e41cb03e2020e3a2cfeff51d9_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 11.8MB
- SHA256 7ec69612dd8b7fc9df6b1dfe9c5aafcedca07e6ed2446b76f070f92c1eefab07
- MD5 c8ea3e7e41cb03e2020e3a2cfeff51d9
- SHA1 33bd2893fa99e5949f0c2caf6a730bdc9ea64910
- SHA512 eec0610b0ee9d9f26203ff77b2d3579545dc8371f1d265a8e9c419a891a77de6ac379854e820c0be42c108e11df4ee5e88fcd81c668320ddd911b832a6c3f188
- SSDEEP 98304:VhUONrUiZZ6reKToqn9kC+Oa3KkEjmgrlvfvkvcvjsd72+c2iTv+v4v+v3viojqd:V3rUaZ6M+jm52Tuj7g1
- TLSH T170C64B47E8A542E5C0AED176CA769253BA713C885B3063D72B90F7342F77BD06AB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1