General
- Target 2026-08-17_6923b97b2a1e695b73b785ec30580cc0_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.3MB
- Sample260818-amp69stsbt
- SHA256 2a01056369cc691f5bed6bd2654930a81d1bc240a568a0d5b209aceef3b5c9c9
- MD5 6923b97b2a1e695b73b785ec30580cc0
- SHA1 4dbe654f0d3be5fae6ac3c1e45969fc1132a801f
- SHA512 a7c5f91127fff0ecbd69b91df53daadf783322a238184b056122f1325680b014ca05dfdc5f23d2ceec5498d004e79078eab96ff8a257cb270dcf0bf88c47834d
- SSDEEP 49152:9+VxUTpK88iyX526+P458uO6dqrBUtop9bjpEgUxhoNgPMJqjjK5ENkbVeM5+h66:W8/lwop9PpbHqYEw15+xg
- TLSH T10F664A07ECA145E8C0AED635CA669253BB717C484B3527D72B50F7382F7ABD0AA79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-17_6923b97b2a1e695b73b785ec30580cc0_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_6923b97b2a1e695b73b785ec30580cc0_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_6923b97b2a1e695b73b785ec30580cc0_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.3MB
- SHA256 2a01056369cc691f5bed6bd2654930a81d1bc240a568a0d5b209aceef3b5c9c9
- MD5 6923b97b2a1e695b73b785ec30580cc0
- SHA1 4dbe654f0d3be5fae6ac3c1e45969fc1132a801f
- SHA512 a7c5f91127fff0ecbd69b91df53daadf783322a238184b056122f1325680b014ca05dfdc5f23d2ceec5498d004e79078eab96ff8a257cb270dcf0bf88c47834d
- SSDEEP 49152:9+VxUTpK88iyX526+P458uO6dqrBUtop9bjpEgUxhoNgPMJqjjK5ENkbVeM5+h66:W8/lwop9PpbHqYEw15+xg
- TLSH T10F664A07ECA145E8C0AED635CA669253BB717C484B3527D72B50F7382F7ABD0AA79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many confidential data stores found in browsers, mail clients, crypt
-
Executes dropped EXE
-
Adds Run key to start application
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.