General
- Target 2026-08-15_ea7626ff608d8264fa3023dd4ab20a21_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 7.6MB
- Sample260815-dl6dmsde64
- SHA256 317b12da4f857589aa755e2b67c0adb6fe20f7e58ef802cf91941a2841048f29
- MD5 ea7626ff608d8264fa3023dd4ab20a21
- SHA1 a2217de3c6e145a2bd4f7bdcd6d1f0e15bb0d927
- SHA512 e1a74a7028573553a720a0ecc3827f8985b0bd74f828bbc4e6752d3d7ee57cb57a4d2ca2c43f4693598265163753a6461ab779bad250b01eed1987cf0961a97c
- SSDEEP 98304:6cTDO+KugALEGBHBeE9+R1UAMtYd5ZsHiByBnQJpLEnWO:jO+KugpzE9Y6HtAQiBgWynW
- TLSH T18F868D03EC9545E9C1AAE334C5A29253BA71BC444B3223D72F90F7392F76BD4AA79740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_ea7626ff608d8264fa3023dd4ab20a21_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_ea7626ff608d8264fa3023dd4ab20a21_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_ea7626ff608d8264fa3023dd4ab20a21_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 7.6MB
- SHA256 317b12da4f857589aa755e2b67c0adb6fe20f7e58ef802cf91941a2841048f29
- MD5 ea7626ff608d8264fa3023dd4ab20a21
- SHA1 a2217de3c6e145a2bd4f7bdcd6d1f0e15bb0d927
- SHA512 e1a74a7028573553a720a0ecc3827f8985b0bd74f828bbc4e6752d3d7ee57cb57a4d2ca2c43f4693598265163753a6461ab779bad250b01eed1987cf0961a97c
- SSDEEP 98304:6cTDO+KugALEGBHBeE9+R1UAMtYd5ZsHiByBnQJpLEnWO:jO+KugpzE9Y6HtAQiBgWynW
- TLSH T18F868D03EC9545E9C1AAE334C5A29253BA71BC444B3223D72F90F7392F76BD4AA79740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE