General
- Target 2026-08-08_a86852060f63d437b47cb01dcec04794_coinminer_dosia_frostygoop_ghostlocker_glassworm_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver
- Size 5.9MB
- Sample260809-affz1sfh87
- SHA256 590ef012192cd5618f66d034dc0addfe95eb79d7bc7c552b312a8387d7134bd8
- MD5 a86852060f63d437b47cb01dcec04794
- SHA1 172afed848927e3010abc0a35650d99faaaa2022
- SHA512 5d0c33fc76bb5a4436ecc8479e03a31ae55d18a3640f81a7cc4ea7fa33d93691d7910dc8c64c7614035fb7264f87f9fc11043381f53bf4b985d4c1af734ab66c
- SSDEEP 98304:OS9kh25L+SEVZPvNEbNW+N31IJFgVxiwKHUo2:O25LnuPvebQW1IcziwK0
- TLSH T12D568C47ECA509E9C6A9A231C9A792527B717C581B3223D72FA0B7382F73BD05E75304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_a86852060f63d437b47cb01dcec04794_coinminer_dosia_frostygoop_ghostlocker_glassworm_knight_.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_a86852060f63d437b47cb01dcec04794_coinminer_dosia_frostygoop_ghostlocker_glassworm_knight_.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_a86852060f63d437b47cb01dcec04794_coinminer_dosia_frostygoop_ghostlocker_glassworm_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver
- Size 5.9MB
- SHA256 590ef012192cd5618f66d034dc0addfe95eb79d7bc7c552b312a8387d7134bd8
- MD5 a86852060f63d437b47cb01dcec04794
- SHA1 172afed848927e3010abc0a35650d99faaaa2022
- SHA512 5d0c33fc76bb5a4436ecc8479e03a31ae55d18a3640f81a7cc4ea7fa33d93691d7910dc8c64c7614035fb7264f87f9fc11043381f53bf4b985d4c1af734ab66c
- SSDEEP 98304:OS9kh25L+SEVZPvNEbNW+N31IJFgVxiwKHUo2:O25LnuPvebQW1IcziwK0
- TLSH T12D568C47ECA509E9C6A9A231C9A792527B717C581B3223D72FA0B7382F73BD05E75304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext