General
- Target 2026-08-20_5ef8737572e3e5962614b426355cab73_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 9.4MB
- Sample260820-weeapagl81
- SHA256 f45b6c3f8ddc2e5a871303d03179a2fb3b665018857f2c8d84de8141dc81388b
- MD5 5ef8737572e3e5962614b426355cab73
- SHA1 ca91455ff9d7b366e6353c012d1ab5bd8f66ebd5
- SHA512 5292ab377c03845de04ef83950422571622c007a88018d3a2a634b31a3ec262a5d3f371d0c108990f20f22a073425b8198b0941a2370d5a783df05628e122be8
- SSDEEP 98304:rUTdn2pfbijj5L5rSY9Zq0KkcoGF/+/OC0nFlB/Q2mjJiuxEKJ:RYjtJVJKLoG13CI/ZC
- TLSH T1CDA64941FEDB55F2F50B1831525BB23F26342D098F28CBD7EB507B6AE8776921832246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-20_5ef8737572e3e5962614b426355cab73_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_5ef8737572e3e5962614b426355cab73_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_5ef8737572e3e5962614b426355cab73_coinminer_dosia_elex_frostygoop_glassworm_hive_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 9.4MB
- SHA256 f45b6c3f8ddc2e5a871303d03179a2fb3b665018857f2c8d84de8141dc81388b
- MD5 5ef8737572e3e5962614b426355cab73
- SHA1 ca91455ff9d7b366e6353c012d1ab5bd8f66ebd5
- SHA512 5292ab377c03845de04ef83950422571622c007a88018d3a2a634b31a3ec262a5d3f371d0c108990f20f22a073425b8198b0941a2370d5a783df05628e122be8
- SSDEEP 98304:rUTdn2pfbijj5L5rSY9Zq0KkcoGF/+/OC0nFlB/Q2mjJiuxEKJ:RYjtJVJKLoG13CI/ZC
- TLSH T1CDA64941FEDB55F2F50B1831525BB23F26342D098F28CBD7EB507B6AE8776921832246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2