General
- Target 2026-08-09_fcf78948cdf2b74c4fe03786d99ac96d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 19.5MB
- Sample260809-x2caaaxvfv
- SHA256 19971776df5a162a89a680f60debd5fb9de8742e91f617db79758b76ec824402
- MD5 fcf78948cdf2b74c4fe03786d99ac96d
- SHA1 6cc883e5bf56d7dec2e33099be54a7382eab0d71
- SHA512 4bf935bc512c44c26ad5a2fa3bcf11e6e69955805a4fe5a71514ebe818d88fd6ec6a4c39ba9627b380dacefe9d487ce7a370f3731e9b95ef7b6ab7d2529b3f97
- SSDEEP 196608:z7G/mvecG7pxIXPnUNPn0tEbOmyWkHyKommAA:z7G9cG7pqXptEGWwtzmAA
- TLSH T1DC275A47E96541E4C0EAD575C66B9663BF313C984B2063D32B60FA246F72FD06EBA700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_fcf78948cdf2b74c4fe03786d99ac96d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_fcf78948cdf2b74c4fe03786d99ac96d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_fcf78948cdf2b74c4fe03786d99ac96d_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 19.5MB
- SHA256 19971776df5a162a89a680f60debd5fb9de8742e91f617db79758b76ec824402
- MD5 fcf78948cdf2b74c4fe03786d99ac96d
- SHA1 6cc883e5bf56d7dec2e33099be54a7382eab0d71
- SHA512 4bf935bc512c44c26ad5a2fa3bcf11e6e69955805a4fe5a71514ebe818d88fd6ec6a4c39ba9627b380dacefe9d487ce7a370f3731e9b95ef7b6ab7d2529b3f97
- SSDEEP 196608:z7G/mvecG7pxIXPnUNPn0tEbOmyWkHyKommAA:z7G9cG7pqXptEGWwtzmAA
- TLSH T1DC275A47E96541E4C0EAD575C66B9663BF313C984B2063D32B60FA246F72FD06EBA700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.