General
- Target 2026-08-19_82c477a1a308f94fe8b4dd565ad29bb4_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.7MB
- Sample260819-fxeq6sdr9s
- SHA256 a987f29166acb6632746d67c1e75f4ef9279cb75d1b18238d8e90091a0b7d4d5
- MD5 82c477a1a308f94fe8b4dd565ad29bb4
- SHA1 b7995c0baa8d8184c1efb691c28f0020ab498be9
- SHA512 435754c14d524ca85366aaba9d45a96cc5020f7c96f4534cf24665ee15e93be4472554339f520617a10807433aa7c618f9ed4582ddfededb402461907c63feec
- SSDEEP 49152:NNCKcILVeVONhJN9oTA/le9+qjes21CJqwRA4d693jVcLz9UtVDHpBEZ5Eu:iKcILIKL9oEdeIsGNyzqDHQE
- TLSH T1DC663842FA8B98F2F90328351457B26F27346D058F39CB9BEB407B6AE8776C11877245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-19_82c477a1a308f94fe8b4dd565ad29bb4_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_po.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_82c477a1a308f94fe8b4dd565ad29bb4_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_po.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_82c477a1a308f94fe8b4dd565ad29bb4_coinminer_dosia_elex_frostygoop_glassworm_hive_ngrbot_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 6.7MB
- SHA256 a987f29166acb6632746d67c1e75f4ef9279cb75d1b18238d8e90091a0b7d4d5
- MD5 82c477a1a308f94fe8b4dd565ad29bb4
- SHA1 b7995c0baa8d8184c1efb691c28f0020ab498be9
- SHA512 435754c14d524ca85366aaba9d45a96cc5020f7c96f4534cf24665ee15e93be4472554339f520617a10807433aa7c618f9ed4582ddfededb402461907c63feec
- SSDEEP 49152:NNCKcILVeVONhJN9oTA/le9+qjes21CJqwRA4d693jVcLz9UtVDHpBEZ5Eu:iKcILIKL9oEdeIsGNyzqDHQE
- TLSH T1DC663842FA8B98F2F90328351457B26F27346D058F39CB9BEB407B6AE8776C11877245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.