General
- Target 2026-08-19_973ed382bad3018ad7fa2d6251395e2d_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- Sample260819-fnkwtsdb29
- SHA256 42eed8a6177896b7b5390de5e3d76d19d8bdfccdca83e263baffadd155572f12
- MD5 973ed382bad3018ad7fa2d6251395e2d
- SHA1 e09db48dcbfdf5f97abd784376c3b862fc363075
- SHA512 8eeae4812a3cc83c2c2218e7c8d1771cad387f94d2a09c03406e479fa829e4b9441d5074edabbf1a408f61abc23b37c7070daa7fdfaa0ce80914b525e1f0d2a3
- SSDEEP 49152:PZUW7NA52S1LJldmkuNlWD+yAg7Xjjjg3R/sNHlo8rzDVHiIz7UcOpb5ElV:Z7NA52iJP3uNQqyoiN5NzTO7ElV
- TLSH T16D562810FE8B54F5E94759300167B23F63346D094F25DBE7EB847B6AF8772A10A3620A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-19_973ed382bad3018ad7fa2d6251395e2d_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_po.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_973ed382bad3018ad7fa2d6251395e2d_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.6MB
- SHA256 42eed8a6177896b7b5390de5e3d76d19d8bdfccdca83e263baffadd155572f12
- MD5 973ed382bad3018ad7fa2d6251395e2d
- SHA1 e09db48dcbfdf5f97abd784376c3b862fc363075
- SHA512 8eeae4812a3cc83c2c2218e7c8d1771cad387f94d2a09c03406e479fa829e4b9441d5074edabbf1a408f61abc23b37c7070daa7fdfaa0ce80914b525e1f0d2a3
- SSDEEP 49152:PZUW7NA52S1LJldmkuNlWD+yAg7Xjjjg3R/sNHlo8rzDVHiIz7UcOpb5ElV:Z7NA52iJP3uNQqyoiN5NzTO7ElV
- TLSH T16D562810FE8B54F5E94759300167B23F63346D094F25DBE7EB847B6AF8772A10A3620A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.