fde48672bd7a7fdcfdceb5de065d9c1e4ac7e2a6d7610714d5ea68857d19f02d | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-16...st.exe

windows10-2004-x64

7

2026-08-16...st.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_7c507b37fceb8e5c33e608f3ba67d106_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
Size 10.7MB
Sample260816-evknzazarb
SHA256 fde48672bd7a7fdcfdceb5de065d9c1e4ac7e2a6d7610714d5ea68857d19f02d
MD5 7c507b37fceb8e5c33e608f3ba67d106
SHA1 3adc67b9270cb1d865965c57340067594e477fee
SHA512 d5afbf675953438260512c0d80aaa2671a35364af9a16cda0aa01df68c7d6ee4d5145f586559527d9a6926f9579c7bcaf437ae913dae6529745b25dfa3f572c9
SSDEEP 98304:gs+06mU+/vUIEGXqAB2qldbU6fRkEe3ykimB1PF2CEXO:gkUIEGaABtlN7M3ykim4
TLSH
T1D0B64A47ECA545E8C5AED135CA669252BB707C485B3027DB2B60F3283F76BD0AE79310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-16_7c507b37fceb8e5c33e608f3ba67d106_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery execution persistence

Behavioral task

behavioral2

Sample

2026-08-16_7c507b37fceb8e5c33e608f3ba67d106_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery execution persistence

Malware Config

Targets

- Target
  2026-08-16_7c507b37fceb8e5c33e608f3ba67d106_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.7MB
- SHA256 fde48672bd7a7fdcfdceb5de065d9c1e4ac7e2a6d7610714d5ea68857d19f02d
- MD5 7c507b37fceb8e5c33e608f3ba67d106
- SHA1 3adc67b9270cb1d865965c57340067594e477fee
- SHA512 d5afbf675953438260512c0d80aaa2671a35364af9a16cda0aa01df68c7d6ee4d5145f586559527d9a6926f9579c7bcaf437ae913dae6529745b25dfa3f572c9
- SSDEEP 98304:gs+06mU+/vUIEGXqAB2qldbU6fRkEe3ykimB1PF2CEXO:gkUIEGaABtlN7M3ykim4
- TLSH
  T1D0B64A47ECA545E8C5AED135CA669252BB707C485B3027DB2B60F3283F76BD0AE79310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

File and Directory Permissions Modification

Hide Artifacts

Ignore Process Interrupts

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistence

behavioral2

defense_evasiondiscoveryexecutionpersistence

© 2018-2026

Terms | Privacy