General
- Target 2026-08-19_c10197f0fef97496fead11cdd3a325b1_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- Sample260819-e4k14aythx
- SHA256 55053d566dfe740e82b8f44621776bffb2ad1c472d9372c7c54412f166ad92aa
- MD5 c10197f0fef97496fead11cdd3a325b1
- SHA1 73524691664376893f2b8b3194f9e4e673c5967b
- SHA512 f70a2455146a333d84772f30b0eab909e70406abe90c5d988117daadf143e78f08c17d53b44568ebf6611247336493de0417d0899d9f4337d9d250d792d905bf
- SSDEEP 49152:t2s4MR4jrhxoirBJgRjlYNiy2HQTMWf1XrHmJoR8jqDVV36fz7ULWOd4E5EPV:wMR4jrAi9ORji4yt6Dsgzs3dREPV
- TLSH T112562810FE8B95F5E94759300167B23F63306D058F24DBDBEB447B6AF8772A10A3624A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-19_c10197f0fef97496fead11cdd3a325b1_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_po.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_c10197f0fef97496fead11cdd3a325b1_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- SHA256 55053d566dfe740e82b8f44621776bffb2ad1c472d9372c7c54412f166ad92aa
- MD5 c10197f0fef97496fead11cdd3a325b1
- SHA1 73524691664376893f2b8b3194f9e4e673c5967b
- SHA512 f70a2455146a333d84772f30b0eab909e70406abe90c5d988117daadf143e78f08c17d53b44568ebf6611247336493de0417d0899d9f4337d9d250d792d905bf
- SSDEEP 49152:t2s4MR4jrhxoirBJgRjlYNiy2HQTMWf1XrHmJoR8jqDVV36fz7ULWOd4E5EPV:wMR4jrAi9ORji4yt6Dsgzs3dREPV
- TLSH T112562810FE8B95F5E94759300167B23F63306D058F24DBDBEB447B6AF8772A10A3624A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.