General
- Target 2026-07-30_912b0617044aa9fba4a7ef790dba1ce9_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer_njrat_poet-rat_quasar-rat_sliver_snatch
- Size 27.0MB
- Sample260730-dp572sba23
- SHA256 53c222adf8c36d333a7cbbec67cecd3de61f786cd1ec373648b0cf4ef20bb92d
- MD5 912b0617044aa9fba4a7ef790dba1ce9
- SHA1 16b9a8c1fb7675b6b76505402e77efcfe842a50d
- SHA512 9cfae54fc57807fa6b2099b7bb96eaacd58cc4ba8a81bd0235e6c57bda209c2e439f107dc4f56f520ea244a8695cb41d733a95cbb6378ad9e205954c7363d973
- SSDEEP 196608:accR0BT/0iMIWtbtLnUHJD+mKjfwvZdR0UxvzRViDw0SqHlPpDj+OGE:aZyiIWtOHJDf0wvZQOrLkFPdjgE
- TLSH T1D4575B47F86504E9C1ADD534C57292137BB17C8A8B3023D76B60F6282F76BE06EB9B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_912b0617044aa9fba4a7ef790dba1ce9_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_912b0617044aa9fba4a7ef790dba1ce9_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_912b0617044aa9fba4a7ef790dba1ce9_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer_njrat_poet-rat_quasar-rat_sliver_snatch
- Size 27.0MB
- SHA256 53c222adf8c36d333a7cbbec67cecd3de61f786cd1ec373648b0cf4ef20bb92d
- MD5 912b0617044aa9fba4a7ef790dba1ce9
- SHA1 16b9a8c1fb7675b6b76505402e77efcfe842a50d
- SHA512 9cfae54fc57807fa6b2099b7bb96eaacd58cc4ba8a81bd0235e6c57bda209c2e439f107dc4f56f520ea244a8695cb41d733a95cbb6378ad9e205954c7363d973
- SSDEEP 196608:accR0BT/0iMIWtbtLnUHJD+mKjfwvZdR0UxvzRViDw0SqHlPpDj+OGE:aZyiIWtOHJDf0wvZQOrLkFPdjgE
- TLSH T1D4575B47F86504E9C1ADD534C57292137BB17C8A8B3023D76B60F6282F76BE06EB9B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Deletes itself
Executes dropped EXE
Checks whether UAC is enabled