General
- Target 2026-07-30_0f7034404ce136483194de8c62bab461_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- Sample260730-2nssbsyepe
- SHA256 eb170e90470d9a6b36e20feeecd857c9b418e6fcb44f7abce7f8140789e39a17
- MD5 0f7034404ce136483194de8c62bab461
- SHA1 712c5c0a4199175d65a8d8b93f2ec43547dac65c
- SHA512 9779772d223b55a07251653d556523ae442dc948ad9c160f18014a2d4603ccf9f340e63a20557ef34a7396dcff8080c0234921efb3b62eb12bde3042ee217c26
- SSDEEP 49152:IQTKZzZxiFlQWbO+ruRJd5Kp3GdU+Ah8GzQAl+P2R8PXG5EMPcwJ0Xr+kqNs2baY:O+iEpWJGzddEGSrVUWwD
- TLSH T139464A07F9A545E8C4AED634C6629263BE71BC485B3023D32B60F7786F76BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_0f7034404ce136483194de8c62bab461_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_0f7034404ce136483194de8c62bab461_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_0f7034404ce136483194de8c62bab461_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- SHA256 eb170e90470d9a6b36e20feeecd857c9b418e6fcb44f7abce7f8140789e39a17
- MD5 0f7034404ce136483194de8c62bab461
- SHA1 712c5c0a4199175d65a8d8b93f2ec43547dac65c
- SHA512 9779772d223b55a07251653d556523ae442dc948ad9c160f18014a2d4603ccf9f340e63a20557ef34a7396dcff8080c0234921efb3b62eb12bde3042ee217c26
- SSDEEP 49152:IQTKZzZxiFlQWbO+ruRJd5Kp3GdU+Ah8GzQAl+P2R8PXG5EMPcwJ0Xr+kqNs2baY:O+iEpWJGzddEGSrVUWwD
- TLSH T139464A07F9A545E8C4AED634C6629263BE71BC485B3023D32B60F7786F76BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox drivers on disk
-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Looks for VMWare drivers on disk
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Windows Command Shell
1