General
- Target 2026-07-16_4f90e78b9c2c4ba395e552fae62d40e5_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 18.5MB
- Sample260716-gw2pzset8p
- SHA256 2c6a7f2bd13e85c640d7839cf9ae8b8e1da749fd8c0a061a12a65afdc8eaca18
- MD5 4f90e78b9c2c4ba395e552fae62d40e5
- SHA1 63ab1c5b86748a093a87fc8fb7fae31dbdeae7ee
- SHA512 e19aab22125652c96b2897dbd182d51953af6da06f90d3566b5b20f9712a26957415c7b077235a2a75841571ec315b37a1bc47c8ef16c8a7f89b82b47da176a4
- SSDEEP 196608:9vhwJEqGhyJwS0VgVx2SZKy8bWbYd5bwe2knnopc:thwOq4/S4yx2A/s/bwcnT
- TLSH T16117AE43EDD505E5C4A9AE38C5A282537B71BC44873123DB6BA4F6383BB7BD02AB5710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_4f90e78b9c2c4ba395e552fae62d40e5_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_lu.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_4f90e78b9c2c4ba395e552fae62d40e5_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_lu.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_4f90e78b9c2c4ba395e552fae62d40e5_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 18.5MB
- SHA256 2c6a7f2bd13e85c640d7839cf9ae8b8e1da749fd8c0a061a12a65afdc8eaca18
- MD5 4f90e78b9c2c4ba395e552fae62d40e5
- SHA1 63ab1c5b86748a093a87fc8fb7fae31dbdeae7ee
- SHA512 e19aab22125652c96b2897dbd182d51953af6da06f90d3566b5b20f9712a26957415c7b077235a2a75841571ec315b37a1bc47c8ef16c8a7f89b82b47da176a4
- SSDEEP 196608:9vhwJEqGhyJwS0VgVx2SZKy8bWbYd5bwe2knnopc:thwOq4/S4yx2A/s/bwcnT
- TLSH T16117AE43EDD505E5C4A9AE38C5A282537B71BC44873123DB6BA4F6383BB7BD02AB5710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE