General
- Target 2026-08-07_23ecc0f7d55e221bced624e84f8395ca_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_salatstealer_sliver_snatch
- Size 51.7MB
- Sample260808-b5nltsfn7v
- SHA256 54d1b7c5d9166200c4fab4943ab079db1b948f024091ebcfbd816bd69f6d8a88
- MD5 23ecc0f7d55e221bced624e84f8395ca
- SHA1 1760eb7f4ca723e407c6587267ad667518b33492
- SHA512 1b7e4821e07106faf74ae59f31cd2c691180ddb8cf115f765102d6504cea3c4bd10b16ce1444d92192cc436bb79e142fe5fa7916677a6b8171a606ea789823c0
- SSDEEP 393216:+dw5W/y4VUGNiJVkEUVQxsfeNZuTksmnBdN5FlMd:+dCWTUjJjrxueWTksmI
- TLSH T1A7C77C8BF19402ACD8D5C17887369022E73E746E67BAA3D7475CA2301F236C4E637B95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_23ecc0f7d55e221bced624e84f8395ca_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_23ecc0f7d55e221bced624e84f8395ca_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_23ecc0f7d55e221bced624e84f8395ca_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_salatstealer_sliver_snatch
- Size 51.7MB
- SHA256 54d1b7c5d9166200c4fab4943ab079db1b948f024091ebcfbd816bd69f6d8a88
- MD5 23ecc0f7d55e221bced624e84f8395ca
- SHA1 1760eb7f4ca723e407c6587267ad667518b33492
- SHA512 1b7e4821e07106faf74ae59f31cd2c691180ddb8cf115f765102d6504cea3c4bd10b16ce1444d92192cc436bb79e142fe5fa7916677a6b8171a606ea789823c0
- SSDEEP 393216:+dw5W/y4VUGNiJVkEUVQxsfeNZuTksmnBdN5FlMd:+dCWTUjJjrxueWTksmI
- TLSH T1A7C77C8BF19402ACD8D5C17887369022E73E746E67BAA3D7475CA2301F236C4E637B95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled