General
- Target 2026-08-16_5012899ec400ed01aea2c8fe2cfd4b1e_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_remcos_salatstealer_sliver_snatch
- Size 6.7MB
- Sample260816-rwkftazeqa
- SHA256 86ad0bc1f58be0815f17fc69f3327752f34a2541ab9da857a323178ed3263d6b
- MD5 5012899ec400ed01aea2c8fe2cfd4b1e
- SHA1 94d6e776e2eba1d25c3cb9386742d2716faa2a0f
- SHA512 3ceba1558d96e6389acdc9781f56c305ef9e5c56d6f0c5cef9b49b04239e94a25139389988b0167322a4d36844a4e8eebed670103ccbd57b7f439a0dc749c4ea
- SSDEEP 49152:/boLAzmH+c7RRwlB5XUez70SDjLi/pp1PIuXi4hp8Y8kbE1lDs7S46QpjaOvBYZQ:/bcxMcQLihDVrpGAQFr+QET
- TLSH T19F666B43E8A655E9C0AEE63085729253BA717C485F3123D72B90F7382F77BD06AB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-16_5012899ec400ed01aea2c8fe2cfd4b1e_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_5012899ec400ed01aea2c8fe2cfd4b1e_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_5012899ec400ed01aea2c8fe2cfd4b1e_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_remcos_salatstealer_sliver_snatch
- Size 6.7MB
- SHA256 86ad0bc1f58be0815f17fc69f3327752f34a2541ab9da857a323178ed3263d6b
- MD5 5012899ec400ed01aea2c8fe2cfd4b1e
- SHA1 94d6e776e2eba1d25c3cb9386742d2716faa2a0f
- SHA512 3ceba1558d96e6389acdc9781f56c305ef9e5c56d6f0c5cef9b49b04239e94a25139389988b0167322a4d36844a4e8eebed670103ccbd57b7f439a0dc749c4ea
- SSDEEP 49152:/boLAzmH+c7RRwlB5XUez70SDjLi/pp1PIuXi4hp8Y8kbE1lDs7S46QpjaOvBYZQ:/bcxMcQLihDVrpGAQFr+QET
- TLSH T19F666B43E8A655E9C0AEE63085729253BA717C485F3123D72B90F7382F77BD06AB9740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory