General
- Target 2026-08-16_9475eb9932bd7da4e069ec1635a95ac7_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 8.0MB
- Sample260816-chqcksysf1
- SHA256 7b26e34abce55a023b7eabb51669a1571ca5fcca4af3e991a72fbdaf9a44e4ec
- MD5 9475eb9932bd7da4e069ec1635a95ac7
- SHA1 986f4ca83bdab35543b99599931ef4704be412bb
- SHA512 e66e4431bc79d0f0433a32b9502bd13bb1c73f1d63618c8771c1ef9957e393e3ee0fc8ddc644a1f85061976b3645a0880a18341a776330c7687346887c2bd8d8
- SSDEEP 49152:G7Gd18at5VDjw38hVoVHdqeNTcdJBp9HMJAWxUyy96zTnh21jOjBj7gkssG8I0IS:GaDmW7dx9HH9vqQkktIuAp+MMTDF9E
- TLSH T109865B07F86549E9C0AAE1318562D162BB70BC485B3227D72BA0F7393F76BD06E79740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9475eb9932bd7da4e069ec1635a95ac7_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9475eb9932bd7da4e069ec1635a95ac7_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9475eb9932bd7da4e069ec1635a95ac7_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 8.0MB
- SHA256 7b26e34abce55a023b7eabb51669a1571ca5fcca4af3e991a72fbdaf9a44e4ec
- MD5 9475eb9932bd7da4e069ec1635a95ac7
- SHA1 986f4ca83bdab35543b99599931ef4704be412bb
- SHA512 e66e4431bc79d0f0433a32b9502bd13bb1c73f1d63618c8771c1ef9957e393e3ee0fc8ddc644a1f85061976b3645a0880a18341a776330c7687346887c2bd8d8
- SSDEEP 49152:G7Gd18at5VDjw38hVoVHdqeNTcdJBp9HMJAWxUyy96zTnh21jOjBj7gkssG8I0IS:GaDmW7dx9HH9vqQkktIuAp+MMTDF9E
- TLSH T109865B07F86549E9C0AAE1318562D162BB70BC485B3227D72BA0F7393F76BD06E79740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.