General
- Target 2026-07-17_fabba4fb39a7092ded96f5f00d316049_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- Sample260718-brs96abx4n
- SHA256 6f5aeb80714dc553b063acbf6d636857c3785fe90906d42357c082d205d85557
- MD5 fabba4fb39a7092ded96f5f00d316049
- SHA1 f86ada6dbedaada9d3491f7a5431f18b9b08fb7a
- SHA512 ac5f2acb9c27a6de2e5ce75c54b26b12cd331e6b1b813ec64a039b52a4882c61a67414e5e365c3aacd3150bae1fcceeaccf85658bb5832bdac72265b12600846
- SSDEEP 49152:hQ3WprK5qFNQyjx+lMRJdlgMMG8baA28GbIMIOI2REPXG5EMPGwJ0Xr+kqNs2b4Y:R+aCMvMGbRNE0SrVU0wv
- TLSH T19A464A07F9A545E8C4AED634C6629263BE71BC485B3023D32B60F7786F76BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_fabba4fb39a7092ded96f5f00d316049_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_fabba4fb39a7092ded96f5f00d316049_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260710-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_fabba4fb39a7092ded96f5f00d316049_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- SHA256 6f5aeb80714dc553b063acbf6d636857c3785fe90906d42357c082d205d85557
- MD5 fabba4fb39a7092ded96f5f00d316049
- SHA1 f86ada6dbedaada9d3491f7a5431f18b9b08fb7a
- SHA512 ac5f2acb9c27a6de2e5ce75c54b26b12cd331e6b1b813ec64a039b52a4882c61a67414e5e365c3aacd3150bae1fcceeaccf85658bb5832bdac72265b12600846
- SSDEEP 49152:hQ3WprK5qFNQyjx+lMRJdlgMMG8baA28GbIMIOI2REPXG5EMPGwJ0Xr+kqNs2b4Y:R+aCMvMGbRNE0SrVU0wv
- TLSH T19A464A07F9A545E8C4AED634C6629263BE71BC485B3023D32B60F7786F76BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox drivers on disk
-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Looks for VMWare drivers on disk
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Windows Command Shell
1