Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 05:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_c06d64803a556bcde022b7f4ab8baf89_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_c06d64803a556bcde022b7f4ab8baf89_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-02_c06d64803a556bcde022b7f4ab8baf89_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe
- Size 15.3MB
- Sample260802-galrmsdn31
- SHA256 bc9ca92091dbb66b5a86fe7194a008f4447be737f6d80f0b94d0fd4a0d231137
- MD5 c06d64803a556bcde022b7f4ab8baf89
- SHA1 e3fd3aa0d41331f21ad62a3df3d4d0edafcdaaf6
- SHA512 16d37a28ebd7b6dc8a90cbbdc01ebbf07f4d045a61a0e757e662c2ef261049da69feaab1c9c299565027a4c54426de71c9ae5f9c186cd1ff7bc230970604ea9b
- SSDEEP 98304:xjHML7h3zRf2ki8a0ShYN0TfBUhrAJBpKKYcR+B7yrc2dRWYycBAl52qDQhZE:xqTubG6pocRphPsch6
- TLSH T107F63941FECB40F6E94358714497B22F23345E018B29CBEBEB40BA7AF97B6950D36245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-02_c06d64803a556bcde022b7f4ab8baf89_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-02_c06d64803a556bcde022b7f4ab8baf89_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-02_c06d64803a556bcde022b7f4ab8baf89_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4168