General
- Target 2026-08-10_6b6e9466c90a7f853f430c963ded4d04_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.2MB
- Sample260811-bm5sdsbf96
- SHA256 59ba5ff4bc846dc241fd6ab5a90b347c68ab367d2d7862f61619bf25345fb8b5
- MD5 6b6e9466c90a7f853f430c963ded4d04
- SHA1 daf6fb53d7f6ed45d6f6b8476c9dba682a5a3947
- SHA512 d383baa1de955c4b628b40d80cecf11e4787531096d9442eb08da6befa66ac40410ca41d023222aae95ff3579f6b8502d816ff47034b6ffd407914bfed960e40
- SSDEEP 49152:30pjz7qERUNxHNItXTSKTudNYDARS3L9N2bqqnq3+bg+EUVbpg5VhokOAJwfKiKN:3omOh6cNvqny+bLNy+dBLBE
- TLSH T15D664A07ECA155E8C0AAE23589739212BBB17C485B3523D72B90F7382F76BD06E79750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_6b6e9466c90a7f853f430c963ded4d04_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_6b6e9466c90a7f853f430c963ded4d04_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_6b6e9466c90a7f853f430c963ded4d04_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.2MB
- SHA256 59ba5ff4bc846dc241fd6ab5a90b347c68ab367d2d7862f61619bf25345fb8b5
- MD5 6b6e9466c90a7f853f430c963ded4d04
- SHA1 daf6fb53d7f6ed45d6f6b8476c9dba682a5a3947
- SHA512 d383baa1de955c4b628b40d80cecf11e4787531096d9442eb08da6befa66ac40410ca41d023222aae95ff3579f6b8502d816ff47034b6ffd407914bfed960e40
- SSDEEP 49152:30pjz7qERUNxHNItXTSKTudNYDARS3L9N2bqqnq3+bg+EUVbpg5VhokOAJwfKiKN:3omOh6cNvqny+bLNy+dBLBE
- TLSH T15D664A07ECA155E8C0AAE23589739212BBB17C485B3523D72B90F7382F76BD06E79750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.