General
- Target 2026-07-10_a21e71a83a96e093755b9f92ea10bcf7_coinminer_dosia_eternalromance_glassworm_hive_luca-stealer_ngrbot_poet-rat_quasar-rat_snatch_zxxz
- Size 27.5MB
- Sample260710-1534ysct3q
- SHA256 eb501d3ffdb525575f305e115dbd5ee2951c0f75e432b6847b24720060d738cb
- MD5 a21e71a83a96e093755b9f92ea10bcf7
- SHA1 26432e07141f0a7f0b54cd915519ec2246ae23a0
- SHA512 2020ebfd7c9555d882afbbb26be5c016123bbd423a4cffaee36935634a704a56bef0fe1c36420fb27c540f5c15afc1cb427547f7a57ec65d96e259aa8eef8cfc
- SSDEEP 98304:B0PNdim6nmDqDQpm1ibW023WLAMe8IGGpvNSakp48hIDC1CEdE:B2NqmD6Qp6ibW1WEMe8IFpv0XIW1CB
- TLSH T196574A53F8A114A4E2D8C231C626A6537FB278864B2827C73B9CE7346FF2BC0557A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-10_a21e71a83a96e093755b9f92ea10bcf7_coinminer_dosia_eternalromance_glassworm_hive_luca-steal.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_a21e71a83a96e093755b9f92ea10bcf7_coinminer_dosia_eternalromance_glassworm_hive_luca-steal.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_a21e71a83a96e093755b9f92ea10bcf7_coinminer_dosia_eternalromance_glassworm_hive_luca-stealer_ngrbot_poet-rat_quasar-rat_snatch_zxxz
- Size 27.5MB
- SHA256 eb501d3ffdb525575f305e115dbd5ee2951c0f75e432b6847b24720060d738cb
- MD5 a21e71a83a96e093755b9f92ea10bcf7
- SHA1 26432e07141f0a7f0b54cd915519ec2246ae23a0
- SHA512 2020ebfd7c9555d882afbbb26be5c016123bbd423a4cffaee36935634a704a56bef0fe1c36420fb27c540f5c15afc1cb427547f7a57ec65d96e259aa8eef8cfc
- SSDEEP 98304:B0PNdim6nmDqDQpm1ibW023WLAMe8IGGpvNSakp48hIDC1CEdE:B2NqmD6Qp6ibW1WEMe8IFpv0XIW1CB
- TLSH T196574A53F8A114A4E2D8C231C626A6537FB278864B2827C73B9CE7346FF2BC0557A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables referencing many IR and analysis tools
-
UPX dump on OEP (original entry point)