General
- Target 2026-08-15_2ae460508808f939ca76bb2372932326_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 8.1MB
- Sample260815-gxe8dazhjf
- SHA256 f2061b780a2fef421e753c138ccfcf08f2cdaa6264ffa734c3b30e4df815a7ce
- MD5 2ae460508808f939ca76bb2372932326
- SHA1 903f90f4ff07d80b6516ec1f4ca794b921136053
- SHA512 ca8bab5b72ce4bd02bc638c83b860d1766a0c7a2c904e07cbc8cb06710c83906c763d466ad9da4b70d71cf7df261904264a2cf84d304eedd9944fc189d171c8c
- SSDEEP 98304:X5q3f2GAGTxEj4cXNkg/p4RWWtvEH2GG6OCGdOZ7ZEq/sYO:Uv2GAmSaWWSHZG6OCD9ZXsYO
- TLSH T1F9867C07E89559A9C1AED231C9B292537B71BC484B3223D72B60F73D2F76BD46A79300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_2ae460508808f939ca76bb2372932326_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_2ae460508808f939ca76bb2372932326_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_2ae460508808f939ca76bb2372932326_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 8.1MB
- SHA256 f2061b780a2fef421e753c138ccfcf08f2cdaa6264ffa734c3b30e4df815a7ce
- MD5 2ae460508808f939ca76bb2372932326
- SHA1 903f90f4ff07d80b6516ec1f4ca794b921136053
- SHA512 ca8bab5b72ce4bd02bc638c83b860d1766a0c7a2c904e07cbc8cb06710c83906c763d466ad9da4b70d71cf7df261904264a2cf84d304eedd9944fc189d171c8c
- SSDEEP 98304:X5q3f2GAGTxEj4cXNkg/p4RWWtvEH2GG6OCGdOZ7ZEq/sYO:Uv2GAmSaWWSHZG6OCD9ZXsYO
- TLSH T1F9867C07E89559A9C1AED231C9B292537B71BC484B3223D72B60F73D2F76BD46A79300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Executes dropped EXE
-
Loads dropped DLL