General
- Target 2026-08-16_0c8968a43dba503e53caad36058dfadb_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer_njrat_poet-rat_quasar-rat_sliver_snatch
- Size 27.8MB
- Sample260816-nvleyaxscv
- SHA256 2943c8861d54112b13e4cb4ca5d60050c3d5f1e82bddf21119dd2037cdf09f2f
- MD5 0c8968a43dba503e53caad36058dfadb
- SHA1 0a61d8a41a866d21e1d789358da02402ab53892c
- SHA512 c2a88e1adf3caf39945729ed791c451419552861c8fbeb4fafe2a088b2272778a32881ae21d3f07f60cf0dcaaa4e802392f21f35c75eaf2e72609c1c91e7d7e2
- SSDEEP 393216:YxE6IX4Za+XfYwvZQkcaUNZTF/htV2u+FQE:YxE66OFYwxKXNZTF/htV2u+y
- TLSH T1C0577A03F96444E5C0ADC534C9729612BB717C898B3023E77B68BA246F77BE06EB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_0c8968a43dba503e53caad36058dfadb_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_0c8968a43dba503e53caad36058dfadb_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_0c8968a43dba503e53caad36058dfadb_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer_njrat_poet-rat_quasar-rat_sliver_snatch
- Size 27.8MB
- SHA256 2943c8861d54112b13e4cb4ca5d60050c3d5f1e82bddf21119dd2037cdf09f2f
- MD5 0c8968a43dba503e53caad36058dfadb
- SHA1 0a61d8a41a866d21e1d789358da02402ab53892c
- SHA512 c2a88e1adf3caf39945729ed791c451419552861c8fbeb4fafe2a088b2272778a32881ae21d3f07f60cf0dcaaa4e802392f21f35c75eaf2e72609c1c91e7d7e2
- SSDEEP 393216:YxE6IX4Za+XfYwvZQkcaUNZTF/htV2u+FQE:YxE66OFYwxKXNZTF/htV2u+y
- TLSH T1C0577A03F96444E5C0ADC534C9729612BB717C898B3023E77B68BA246F77BE06EB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Checks whether UAC is enabled