General
- Target 2026-07-20_b05646919654c279d7107fc43d33c576_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.6MB
- Sample260720-c6fs2sfv9y
- SHA256 a065f853935985b50c4f32b4137a0bd72d9af0dab2ca695888d8bc81a9e4b0cb
- MD5 b05646919654c279d7107fc43d33c576
- SHA1 0b0a6b94f65a449d5dacaa99e3062dad785b47c6
- SHA512 3b684f43ca3c06d87ada5ad8aae5edfc2849b08998c0ddb9a80795878be4328d34c8ddae86dca027a8210b63c26680860f14558e1c140ef039a1cb74a84616c8
- SSDEEP 49152:xUtjd8xmHZPUhn/jva0uI9hPWe7nPS0lRITkwgEUqkEt2AjKIvNbus7f7usGNhO8:xUMd1FS0lyTl7kM0IvU9jK0ME
- TLSH T137663887FCA508E8C0AAE33585679252BA617C445F3123D32A90FF392F36BD46EB5750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b05646919654c279d7107fc43d33c576_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b05646919654c279d7107fc43d33c576_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b05646919654c279d7107fc43d33c576_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.6MB
- SHA256 a065f853935985b50c4f32b4137a0bd72d9af0dab2ca695888d8bc81a9e4b0cb
- MD5 b05646919654c279d7107fc43d33c576
- SHA1 0b0a6b94f65a449d5dacaa99e3062dad785b47c6
- SHA512 3b684f43ca3c06d87ada5ad8aae5edfc2849b08998c0ddb9a80795878be4328d34c8ddae86dca027a8210b63c26680860f14558e1c140ef039a1cb74a84616c8
- SSDEEP 49152:xUtjd8xmHZPUhn/jva0uI9hPWe7nPS0lRITkwgEUqkEt2AjKIvNbus7f7usGNhO8:xUMd1FS0lyTl7kM0IvU9jK0ME
- TLSH T137663887FCA508E8C0AAE33585679252BA617C445F3123D32A90FF392F36BD46EB5750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Loads dropped DLL