General
- Target 2026-08-07_82bdb4f9e0d54ae25436306c472a1839_coinminer_darkgate_frostygoop_gcleaner_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 8.0MB
- Sample260807-s9166ayfme
- SHA256 a1e17215620c5d6344e4708cade11bcc22581d5a023d053d6622c6b9801c8717
- MD5 82bdb4f9e0d54ae25436306c472a1839
- SHA1 35ee6d522ca63517c9d758ab5420782c48a77650
- SHA512 a0a543a9fe8e4f9adfb5421bff4389fc0972bf2985b6d18732cf82cd5835ad0c19be3266c2d96b193a3604bb985295c0755336d31d4b07740f2771991ff1d2ce
- SSDEEP 98304:pYNelqLoVNIiuXXiS6jmVVLdiCjFouhNqavILlX4u+FmPKOPzpd5kD+:pI0qLoszX6j4LdiCZHhNq0OlXyFUBNh
- TLSH T1BE86E003BCA148F9C0D5A73189A76262B775BC091B3233D72E60ABB82F767D15E76710
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_82bdb4f9e0d54ae25436306c472a1839_coinminer_darkgate_frostygoop_gcleaner_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_82bdb4f9e0d54ae25436306c472a1839_coinminer_darkgate_frostygoop_gcleaner_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 8.0MB
- SHA256 a1e17215620c5d6344e4708cade11bcc22581d5a023d053d6622c6b9801c8717
- MD5 82bdb4f9e0d54ae25436306c472a1839
- SHA1 35ee6d522ca63517c9d758ab5420782c48a77650
- SHA512 a0a543a9fe8e4f9adfb5421bff4389fc0972bf2985b6d18732cf82cd5835ad0c19be3266c2d96b193a3604bb985295c0755336d31d4b07740f2771991ff1d2ce
- SSDEEP 98304:pYNelqLoVNIiuXXiS6jmVVLdiCjFouhNqavILlX4u+FmPKOPzpd5kD+:pI0qLoszX6j4LdiCZHhNq0OlXyFUBNh
- TLSH T1BE86E003BCA148F9C0D5A73189A76262B775BC091B3233D72E60ABB82F767D15E76710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL