General
- Target 2026-08-22_5111bc694577dba13b0d59236906d46b_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 21.4MB
- Sample260823-kf9bnsvdlb
- SHA256 6d6a892507eaedfe90f410e4e4970f72c0cd1581ece67677ee643d3a29eea61b
- MD5 5111bc694577dba13b0d59236906d46b
- SHA1 7d6ac274a89342161e22302fe646613335849179
- SHA512 ce4cdffbdfbf8a16d08b0d451f2e5afbece30b176fce2d9af0e6d6f821c8590925cfe231b9580af326a672347217a388069dda0d9a1c6f33b9230a76e2bb8152
- SSDEEP 196608:jfqiK8ECathFfGbc5PTCw6LPSv1CqfM+0Tg:jCSECuhlGQ5LCjLYbLJ
- TLSH T1F3374B43E9A105E8C4ADD631C5669223BB727C485B3423D76F64FA293F76BC06BB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-22_5111bc694577dba13b0d59236906d46b_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_5111bc694577dba13b0d59236906d46b_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_5111bc694577dba13b0d59236906d46b_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 21.4MB
- SHA256 6d6a892507eaedfe90f410e4e4970f72c0cd1581ece67677ee643d3a29eea61b
- MD5 5111bc694577dba13b0d59236906d46b
- SHA1 7d6ac274a89342161e22302fe646613335849179
- SHA512 ce4cdffbdfbf8a16d08b0d451f2e5afbece30b176fce2d9af0e6d6f821c8590925cfe231b9580af326a672347217a388069dda0d9a1c6f33b9230a76e2bb8152
- SSDEEP 196608:jfqiK8ECathFfGbc5PTCw6LPSv1CqfM+0Tg:jCSECuhlGQ5LCjLYbLJ
- TLSH T1F3374B43E9A105E8C4ADD631C5669223BB727C485B3423D76F64FA293F76BC06BB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
family_sparkrat
Detects Sparkrat payload
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE