General
- Target 2026-08-17_acbf4d5d57f0a33a5110f8b8096cda46_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.3MB
- Sample260817-gnhl5seq5y
- SHA256 640e322b4433894f6ea242c68d736848fae6aa8282247bd13876d48ccab4dd38
- MD5 acbf4d5d57f0a33a5110f8b8096cda46
- SHA1 619327861b32b3942d301bd66f4d774c48952d91
- SHA512 e6689b5f1dd31932796981f5e01ebfed5312fea62370e3a3ae66f6027e97ae72804d3599b636a4e0deec787d3942b6246682b7d0b4d1b92833fef900e417a3ed
- SSDEEP 98304:+/C+1UZPn2+J3nhc+4nE/PjmVrz8HglA3chARK3PGtumBtZnFiHP:+oPnFJ3hlCCglAfIPpw2P
- TLSH T1DEB68D43E85505EAC5AAA235CAB39253BB767C495B3263D72B50F3382F777C06A79300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_acbf4d5d57f0a33a5110f8b8096cda46_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_acbf4d5d57f0a33a5110f8b8096cda46_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_acbf4d5d57f0a33a5110f8b8096cda46_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.3MB
- SHA256 640e322b4433894f6ea242c68d736848fae6aa8282247bd13876d48ccab4dd38
- MD5 acbf4d5d57f0a33a5110f8b8096cda46
- SHA1 619327861b32b3942d301bd66f4d774c48952d91
- SHA512 e6689b5f1dd31932796981f5e01ebfed5312fea62370e3a3ae66f6027e97ae72804d3599b636a4e0deec787d3942b6246682b7d0b4d1b92833fef900e417a3ed
- SSDEEP 98304:+/C+1UZPn2+J3nhc+4nE/PjmVrz8HglA3chARK3PGtumBtZnFiHP:+oPnFJ3hlCCglAfIPpw2P
- TLSH T1DEB68D43E85505EAC5AAA235CAB39253BB767C495B3263D72B50F3382F777C06A79300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.