General
- Target 2026-07-18_b55e05fc80605d94a42266df87535abc_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- Sample260718-1dxsvsf19t
- SHA256 48b982b60e66d210c29447a772f7d24abb0adb9c018fb5b582522c20373a66f6
- MD5 b55e05fc80605d94a42266df87535abc
- SHA1 638be0a2238f2ae65fe83ff2d1dc5ac7615a2c3e
- SHA512 f4bd09986f9ee7f305b4d8054af85f8f819d64557964bc4846c22ada19b69d4df27dd21320dc511e60495ac90c7908eab02e4856d1590907f91d74e24684f2ec
- SSDEEP 49152:JQTKh1KNl3Qc21+r18p95lMFms7aAJvG4oo0Ocy6kPXG5EMP4wJ0Xr+kqNs275wi:B+KjMY4G4tUE+SrVUlwi
- TLSH T1A5464A07F9A545E8C4AED634C6629263BE71BC485B3023D32B60F7786F76BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-18_b55e05fc80605d94a42266df87535abc_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_b55e05fc80605d94a42266df87535abc_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260710-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_b55e05fc80605d94a42266df87535abc_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- SHA256 48b982b60e66d210c29447a772f7d24abb0adb9c018fb5b582522c20373a66f6
- MD5 b55e05fc80605d94a42266df87535abc
- SHA1 638be0a2238f2ae65fe83ff2d1dc5ac7615a2c3e
- SHA512 f4bd09986f9ee7f305b4d8054af85f8f819d64557964bc4846c22ada19b69d4df27dd21320dc511e60495ac90c7908eab02e4856d1590907f91d74e24684f2ec
- SSDEEP 49152:JQTKh1KNl3Qc21+r18p95lMFms7aAJvG4oo0Ocy6kPXG5EMP4wJ0Xr+kqNs275wi:B+KjMY4G4tUE+SrVUlwi
- TLSH T1A5464A07F9A545E8C4AED634C6629263BE71BC485B3023D32B60F7786F76BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox drivers on disk
-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Looks for VMWare drivers on disk
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Windows Command Shell
1