General
- Target 2026-08-15_63a29f7802a2bb3bfcd05af9a1d22891_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 9.4MB
- Sample260815-eb24xayyav
- SHA256 2ffb5495115703a26dfb5f056fffbaf69254fd648a12b624ffe64528ec0484d6
- MD5 63a29f7802a2bb3bfcd05af9a1d22891
- SHA1 a8eee15c2d49a726ba8c702b59fa1ec676df5297
- SHA512 5916473d0fec716a4a636ce2dcf359b24f0c179b67e91451ee67921fa841381e62a6463afbb6e481ef7529972ba1477bacf17417736cfb5e8f36e536f71a0c42
- SSDEEP 98304:OGK7eSnwmEL3cNXJ54EtkMNzzSLV23YrPN2aWCG8+EArAeDY1T:O3iSnHELsNptkM4SLT8+xrAcGT
- TLSH T15DA68D03EC9155EAC1EAA331C9A29253BA717C485B3263D72B50F3382F77BD06A79750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-15_63a29f7802a2bb3bfcd05af9a1d22891_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_63a29f7802a2bb3bfcd05af9a1d22891_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_63a29f7802a2bb3bfcd05af9a1d22891_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 9.4MB
- SHA256 2ffb5495115703a26dfb5f056fffbaf69254fd648a12b624ffe64528ec0484d6
- MD5 63a29f7802a2bb3bfcd05af9a1d22891
- SHA1 a8eee15c2d49a726ba8c702b59fa1ec676df5297
- SHA512 5916473d0fec716a4a636ce2dcf359b24f0c179b67e91451ee67921fa841381e62a6463afbb6e481ef7529972ba1477bacf17417736cfb5e8f36e536f71a0c42
- SSDEEP 98304:OGK7eSnwmEL3cNXJ54EtkMNzzSLV23YrPN2aWCG8+EArAeDY1T:O3iSnHELsNptkM4SLT8+xrAcGT
- TLSH T15DA68D03EC9155EAC1EAA331C9A29253BA717C485B3263D72B50F3382F77BD06A79750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.