General
- Target 2026-07-10_111ad59cabfccc6c6da4582ab2f39446_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.6MB
- Sample260710-bvfs8scz2x
- SHA256 934cfe3e1aabcab12efe5f742611c1a27d1b3c5cff077531c90579ababab1617
- MD5 111ad59cabfccc6c6da4582ab2f39446
- SHA1 5e433dd28cba4c5ba92d358980258fef6a535491
- SHA512 96604023ceaf81a6a6f50aa78bc7c0592b9880c69a94d305729c240c700c5e9d030bda4563ea6bf9a3356087cfb4ca7b997891560c43339edc201e43d5cf2044
- SSDEEP 49152:qUtjd8xmHZPUhn/jva0uI9hPWe7nPS0lRITkwgEUq78tWAj3I+Nbuz7f7usGNhO4:qUMd1FS0lyTl77UxIpU9jK04E
- TLSH T10A663887FCA508E8C0AAE33585679252BA617C445F3123D32A90FF392F36BD46EB5750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_111ad59cabfccc6c6da4582ab2f39446_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_111ad59cabfccc6c6da4582ab2f39446_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_111ad59cabfccc6c6da4582ab2f39446_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.6MB
- SHA256 934cfe3e1aabcab12efe5f742611c1a27d1b3c5cff077531c90579ababab1617
- MD5 111ad59cabfccc6c6da4582ab2f39446
- SHA1 5e433dd28cba4c5ba92d358980258fef6a535491
- SHA512 96604023ceaf81a6a6f50aa78bc7c0592b9880c69a94d305729c240c700c5e9d030bda4563ea6bf9a3356087cfb4ca7b997891560c43339edc201e43d5cf2044
- SSDEEP 49152:qUtjd8xmHZPUhn/jva0uI9hPWe7nPS0lRITkwgEUq78tWAj3I+Nbuz7f7usGNhO4:qUMd1FS0lyTl77UxIpU9jK04E
- TLSH T10A663887FCA508E8C0AAE33585679252BA617C445F3123D32A90FF392F36BD46EB5750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Loads dropped DLL