General
- Target 2026-08-21_6b1d212aeb38b78311e162f6def1e371_coinminer_frostygoop_ghostlocker_glassworm_luca-stealer_poet-rat_salatstealer_sliver
- Size 29.8MB
- Sample260822-qmskdshj2s
- SHA256 8da478570548fada67e30ef759d82c76d27b343bfd87ccbbed7312b3f51d6c30
- MD5 6b1d212aeb38b78311e162f6def1e371
- SHA1 984ecc920338671652055008dedd767bf7e0ab59
- SHA512 299634bfecb262e1204eeb5f8c2975c18678d53893692b03b407df6c16f756c5576c2554bb28fc4ba8dcc433930354a12dd2cf32fbbf681b5bfdc72141615f28
- SSDEEP 196608:Co+5seL+Vnj4EYkAm/r7IJCTXx2Yb+pew/iHRJiVF2SxqGBxVTmopHg1zsnYYJtF:iL+1jxA8IPpe83YsPdgJHYJMuhxoy
- TLSH T1BE676C02F85A58E9CAFDE034A152AA217BB0345443317BD34F9495B62EB2FD87B3E354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_6b1d212aeb38b78311e162f6def1e371_coinminer_frostygoop_ghostlocker_glassworm_luca-stealer_.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_6b1d212aeb38b78311e162f6def1e371_coinminer_frostygoop_ghostlocker_glassworm_luca-stealer_.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_6b1d212aeb38b78311e162f6def1e371_coinminer_frostygoop_ghostlocker_glassworm_luca-stealer_poet-rat_salatstealer_sliver
- Size 29.8MB
- SHA256 8da478570548fada67e30ef759d82c76d27b343bfd87ccbbed7312b3f51d6c30
- MD5 6b1d212aeb38b78311e162f6def1e371
- SHA1 984ecc920338671652055008dedd767bf7e0ab59
- SHA512 299634bfecb262e1204eeb5f8c2975c18678d53893692b03b407df6c16f756c5576c2554bb28fc4ba8dcc433930354a12dd2cf32fbbf681b5bfdc72141615f28
- SSDEEP 196608:Co+5seL+Vnj4EYkAm/r7IJCTXx2Yb+pew/iHRJiVF2SxqGBxVTmopHg1zsnYYJtF:iL+1jxA8IPpe83YsPdgJHYJMuhxoy
- TLSH T1BE676C02F85A58E9CAFDE034A152AA217BB0345443317BD34F9495B62EB2FD87B3E354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext