General
- Target 2026-08-13_c912f98dc7900ea5b1c1dadc3f83b069_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.2MB
- Sample260813-157gdazbnd
- SHA256 9ddc49da8ed2c85052a8174e12f8363c870cb14a5f738c79b03f8b7e8dd2b61d
- MD5 c912f98dc7900ea5b1c1dadc3f83b069
- SHA1 17c1638bdda58c453ed805c7966c35f697ec3424
- SHA512 9106ac35d15731cc29834def3ee5619624b76d9ea0c6c18210c3cf03cbfa7ae6734893dafa0a1f7b4756b9f50bdf1b7562f8367149cc0c5d87c3f4251852257b
- SSDEEP 49152:wYsAKiLk6ewLhCOT4Jqq4GBUbjb0yyyyylUnXqK+K9KYVL5E+Y5PrA4r3:wKk2KC7crbE+OPrA4r3
- TLSH T13F465B17EDA556E5C0AAE13489229253BB717C881F3223D32B60F7782F76BD06E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_c912f98dc7900ea5b1c1dadc3f83b069_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_c912f98dc7900ea5b1c1dadc3f83b069_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.2MB
- SHA256 9ddc49da8ed2c85052a8174e12f8363c870cb14a5f738c79b03f8b7e8dd2b61d
- MD5 c912f98dc7900ea5b1c1dadc3f83b069
- SHA1 17c1638bdda58c453ed805c7966c35f697ec3424
- SHA512 9106ac35d15731cc29834def3ee5619624b76d9ea0c6c18210c3cf03cbfa7ae6734893dafa0a1f7b4756b9f50bdf1b7562f8367149cc0c5d87c3f4251852257b
- SSDEEP 49152:wYsAKiLk6ewLhCOT4Jqq4GBUbjb0yyyyylUnXqK+K9KYVL5E+Y5PrA4r3:wKk2KC7crbE+OPrA4r3
- TLSH T13F465B17EDA556E5C0AAE13489229253BB717C881F3223D32B60F7782F76BD06E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1