General
- Target 2026-08-03_1f3aed673de9d33f53ff57979ef684ea_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.1MB
- Sample260804-p242asbb83
- SHA256 a83566043e748093119720d9365ee26c3cefebf431fa98e556de2bfc4da50b60
- MD5 1f3aed673de9d33f53ff57979ef684ea
- SHA1 86753add32b1a50021e243a293a869a84935af09
- SHA512 daefae1f00340d939d1fc3a9c7692421d47f9b6539b754458b61590bb1eb0daf9a19b15d5c55080233237d40743b2c68fb3744fc20216480845e7207b69d5438
- SSDEEP 49152:fejSXVdoCb3Ba1HpEVyjVHNwxSboH1Ws3W19LsJKv36IVnCrV5T7zO/WcfKiK9KG:fEjklS8H1vm1BVWf61bWCE
- TLSH T1D2564A07ECA555E9C0A9E2348A6B9213BB71BC485B3123D32B60F7386F72BD46E75350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_1f3aed673de9d33f53ff57979ef684ea_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_1f3aed673de9d33f53ff57979ef684ea_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_1f3aed673de9d33f53ff57979ef684ea_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.1MB
- SHA256 a83566043e748093119720d9365ee26c3cefebf431fa98e556de2bfc4da50b60
- MD5 1f3aed673de9d33f53ff57979ef684ea
- SHA1 86753add32b1a50021e243a293a869a84935af09
- SHA512 daefae1f00340d939d1fc3a9c7692421d47f9b6539b754458b61590bb1eb0daf9a19b15d5c55080233237d40743b2c68fb3744fc20216480845e7207b69d5438
- SSDEEP 49152:fejSXVdoCb3Ba1HpEVyjVHNwxSboH1Ws3W19LsJKv36IVnCrV5T7zO/WcfKiK9KG:fEjklS8H1vm1BVWf61bWCE
- TLSH T1D2564A07ECA555E9C0A9E2348A6B9213BB71BC485B3123D32B60F7386F72BD46E75350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.