General
- Target 2026-08-16_c81e1dc85d380045a89647fdfe8633b4_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 9.8MB
- Sample260816-d9ssfscm8z
- SHA256 b32e2de63ef3cff3dd1ee40f1579cdc68321f165b914f55b67151c949225b030
- MD5 c81e1dc85d380045a89647fdfe8633b4
- SHA1 ce852dcc5e6441fd94a2edaac2a633d0b5ad25ec
- SHA512 fdfd03a0cd33349d85165b3a16c06e4aa2cd47c70885f9e9c350bcbd1caff580d6acfa4df103b2643f0b8a3c18f9c2b4f34df65ee7418443b37d3c00c2734c31
- SSDEEP 98304:p2dvhydpZ5AVluPqaFM9SDB1PXtaQFXr77EMQIvOykt15:p13SluOWXFs5IvOyk
- TLSH T152A64A47E8A505E4C0AAD575C666D613BE713C994B3463D32F90FB282F37BD0AAB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-16_c81e1dc85d380045a89647fdfe8633b4_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_c81e1dc85d380045a89647fdfe8633b4_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_c81e1dc85d380045a89647fdfe8633b4_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 9.8MB
- SHA256 b32e2de63ef3cff3dd1ee40f1579cdc68321f165b914f55b67151c949225b030
- MD5 c81e1dc85d380045a89647fdfe8633b4
- SHA1 ce852dcc5e6441fd94a2edaac2a633d0b5ad25ec
- SHA512 fdfd03a0cd33349d85165b3a16c06e4aa2cd47c70885f9e9c350bcbd1caff580d6acfa4df103b2643f0b8a3c18f9c2b4f34df65ee7418443b37d3c00c2734c31
- SSDEEP 98304:p2dvhydpZ5AVluPqaFM9SDB1PXtaQFXr77EMQIvOykt15:p13SluOWXFs5IvOyk
- TLSH T152A64A47E8A505E4C0AAD575C666D613BE713C994B3463D32F90FB282F37BD0AAB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Detects executables referencing virtualization MAC addresses
-
Executes dropped EXE