General
- Target 2026-08-05_ec63fc63b4e3ba8aec9ee6aa959f6037_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 8.8MB
- Sample260805-c7qpmswfrf
- SHA256 77f7464885df5c5cf0c356288c862983f4dff7fd582a34a1da39e9f1f2586457
- MD5 ec63fc63b4e3ba8aec9ee6aa959f6037
- SHA1 258272f43aa3b702b0c3d9edf3958cff904e90bf
- SHA512 ed2af792670da57f1539d1e67df911a8a784af1651197a84046f7d4b6c4fe99d536e678a912fb83aa57aa9a85e77d770733567f3ad954e537140dfd22958a06f
- SSDEEP 98304:2ZhvtBtowJI4K0+76I0EdzZjtoW8dckp0HPsDNuM:2ZhXtZJI3JNdzl/6ckp8sDN
- TLSH T128968D43EC9155E9C1EAA231CA729293BA717C455B3223D72B90F7382F73BD46AB4350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_ec63fc63b4e3ba8aec9ee6aa959f6037_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_ec63fc63b4e3ba8aec9ee6aa959f6037_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_ec63fc63b4e3ba8aec9ee6aa959f6037_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 8.8MB
- SHA256 77f7464885df5c5cf0c356288c862983f4dff7fd582a34a1da39e9f1f2586457
- MD5 ec63fc63b4e3ba8aec9ee6aa959f6037
- SHA1 258272f43aa3b702b0c3d9edf3958cff904e90bf
- SHA512 ed2af792670da57f1539d1e67df911a8a784af1651197a84046f7d4b6c4fe99d536e678a912fb83aa57aa9a85e77d770733567f3ad954e537140dfd22958a06f
- SSDEEP 98304:2ZhvtBtowJI4K0+76I0EdzZjtoW8dckp0HPsDNuM:2ZhXtZJI3JNdzl/6ckp8sDN
- TLSH T128968D43EC9155E9C1EAA231CA729293BA717C455B3223D72B90F7382F73BD46AB4350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.