General
- Target 2026-07-22_c38a98237c1a7ac7395597bbe78bf8da_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- Sample260722-3a4hcasvez
- SHA256 60bdbfc23aec9ed35505a79e4d6b54308363802dfe2c160cfa46c9f4bfe5c5bf
- MD5 c38a98237c1a7ac7395597bbe78bf8da
- SHA1 6d20091e4dd5d967776096fa3d98821ce98122b5
- SHA512 aa9b26c0d1f73abb9a1522c95f0eeb590f034030d77eee28f11d24790de767deaa6e343533c8922055d410d5fafb380bec58cc876bf6958c887005bc81c88e78
- SSDEEP 49152:EQ3WprK5qFNQyjx+lMRJdlgMMG8baA28GbIMIOI2REPXG5EMP6wJ0Xr+kqNs2b4F:e+aCMvMGbRNEUSrVU0we
- TLSH T169464A07F9A545E8C4AED634C6629263BE71BC485B3023D32B60F7786F76BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-22_c38a98237c1a7ac7395597bbe78bf8da_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_c38a98237c1a7ac7395597bbe78bf8da_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_c38a98237c1a7ac7395597bbe78bf8da_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- SHA256 60bdbfc23aec9ed35505a79e4d6b54308363802dfe2c160cfa46c9f4bfe5c5bf
- MD5 c38a98237c1a7ac7395597bbe78bf8da
- SHA1 6d20091e4dd5d967776096fa3d98821ce98122b5
- SHA512 aa9b26c0d1f73abb9a1522c95f0eeb590f034030d77eee28f11d24790de767deaa6e343533c8922055d410d5fafb380bec58cc876bf6958c887005bc81c88e78
- SSDEEP 49152:EQ3WprK5qFNQyjx+lMRJdlgMMG8baA28GbIMIOI2REPXG5EMP6wJ0Xr+kqNs2b4F:e+aCMvMGbRNEUSrVU0we
- TLSH T169464A07F9A545E8C4AED634C6629263BE71BC485B3023D32B60F7786F76BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Looks for VirtualBox drivers on disk
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
Looks for VMWare drivers on disk
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Windows Command Shell
1