General
- Target 2026-07-30_047176173f689745bdf44d4b219054df_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.3MB
- Sample260730-grkkxadp2x
- SHA256 cf2070ee6487db281939efc95b6fe7c29aeeb2548f76bf967ac004b3e85421ea
- MD5 047176173f689745bdf44d4b219054df
- SHA1 7d9a98d21b80e7719bb79d07e5a2d1ad987f915e
- SHA512 7635bf319fda49d6ec460ded6cc12d620a2b05a50800887e20b6fdeed2a5b584a96e5321d7d678d755ac013e5b77845eb10e499e2259b80188e13fc4aa7287fa
- SSDEEP 98304:FGctRmrwJ3D6HXZ0Eba7ZGuI8XkvY6w+YbE:FmrwJ3On5ADx4
- TLSH T15DB64B57ECA140B5C8BED634856692637A717C484B3127D72B60F7282FB3FD09ABA740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_047176173f689745bdf44d4b219054df_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_047176173f689745bdf44d4b219054df_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_047176173f689745bdf44d4b219054df_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.3MB
- SHA256 cf2070ee6487db281939efc95b6fe7c29aeeb2548f76bf967ac004b3e85421ea
- MD5 047176173f689745bdf44d4b219054df
- SHA1 7d9a98d21b80e7719bb79d07e5a2d1ad987f915e
- SHA512 7635bf319fda49d6ec460ded6cc12d620a2b05a50800887e20b6fdeed2a5b584a96e5321d7d678d755ac013e5b77845eb10e499e2259b80188e13fc4aa7287fa
- SSDEEP 98304:FGctRmrwJ3D6HXZ0Eba7ZGuI8XkvY6w+YbE:FmrwJ3On5ADx4
- TLSH T15DB64B57ECA140B5C8BED634856692637A717C484B3127D72B60F7282FB3FD09ABA740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.