General
- Target 2026-07-09_930a86c0a26795b95392fbd484b339ea_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.7MB
- Sample260709-frlmjacx6m
- SHA256 60e22a430b1e97b633a4534921fee41a896060a4d0015c62475dfcd16ff16f24
- MD5 930a86c0a26795b95392fbd484b339ea
- SHA1 12eb1a3faefe61a4494417fda58d260153522406
- SHA512 ac2afbde117334c322bbd4437053e993ab0193decd5ec3d2e4d417e0df00f8248c463fff58bff8260dd4cf5e3ca271f430c2b4938092cea4768e73901e4a2beb
- SSDEEP 49152:Ncc5G765anah4U5q6RsdHT1vX3gDsuHlRe2B1dLbEuPjltwRAjCpfNbux7f7usGI:NNbFGKsuHls2Bvjj7wZp5U9jK0vE
- TLSH T1EF663887F8A544E8C0AAA33585679252BA717C485F3123D32B90FF382F36BD46E79750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_930a86c0a26795b95392fbd484b339ea_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_930a86c0a26795b95392fbd484b339ea_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_930a86c0a26795b95392fbd484b339ea_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.7MB
- SHA256 60e22a430b1e97b633a4534921fee41a896060a4d0015c62475dfcd16ff16f24
- MD5 930a86c0a26795b95392fbd484b339ea
- SHA1 12eb1a3faefe61a4494417fda58d260153522406
- SHA512 ac2afbde117334c322bbd4437053e993ab0193decd5ec3d2e4d417e0df00f8248c463fff58bff8260dd4cf5e3ca271f430c2b4938092cea4768e73901e4a2beb
- SSDEEP 49152:Ncc5G765anah4U5q6RsdHT1vX3gDsuHlRe2B1dLbEuPjltwRAjCpfNbux7f7usGI:NNbFGKsuHls2Bvjj7wZp5U9jK0vE
- TLSH T1EF663887F8A544E8C0AAA33585679252BA717C485F3123D32B90FF382F36BD46E79750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Loads dropped DLL