General
- Target 2026-08-01_d3487507d6e3f26eb0b44ecdce82665e_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 4.8MB
- Sample260801-c3yvfswbme
- SHA256 779317e9a91d1bff4b75aa43c67dc8333e3273b6a623a1e36bb53026ee5567b0
- MD5 d3487507d6e3f26eb0b44ecdce82665e
- SHA1 aa7a8311bf32a691f25684a34cb45491ba8bbcce
- SHA512 f73d2b5c7b47f23611d8f2278341f15ff7d976f625350dfc217695355595f80d2cdc121fd9ab971b15e775f53d38b391bb6f4b533028ab9dcb511ed6de2d6fb7
- SSDEEP 49152:MEi4AGz23hxTgc0nJrXgOM8dJJhbebTpj0vjH5EB3Zt6Jx3qt95MRo4:riBxTgRJH3hbc2lEBSz6C
- TLSH T1CC364A17EC9545E9C4EEE6308A6292537E317C485B3127D32BA0F7782F76BD06AB9304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_d3487507d6e3f26eb0b44ecdce82665e_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_d3487507d6e3f26eb0b44ecdce82665e_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_d3487507d6e3f26eb0b44ecdce82665e_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 4.8MB
- SHA256 779317e9a91d1bff4b75aa43c67dc8333e3273b6a623a1e36bb53026ee5567b0
- MD5 d3487507d6e3f26eb0b44ecdce82665e
- SHA1 aa7a8311bf32a691f25684a34cb45491ba8bbcce
- SHA512 f73d2b5c7b47f23611d8f2278341f15ff7d976f625350dfc217695355595f80d2cdc121fd9ab971b15e775f53d38b391bb6f4b533028ab9dcb511ed6de2d6fb7
- SSDEEP 49152:MEi4AGz23hxTgc0nJrXgOM8dJJhbebTpj0vjH5EB3Zt6Jx3qt95MRo4:riBxTgRJH3hbc2lEBSz6C
- TLSH T1CC364A17EC9545E9C4EEE6308A6292537E317C485B3127D32BA0F7782F76BD06AB9304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application