General
- Target 2026-08-23_da69a065b9f0c9a552ff491c635eec41_coinminer_elex_frostygoop_glassworm_hive_poet-rat_rex_salatstealer_sliver_snatch
- Size 70.2MB
- Sample260823-xm8d6styct
- SHA256 d21f3c1690492b1f7ee40abcb15705e2a433142b97156ccf8a6a6823112417dd
- MD5 da69a065b9f0c9a552ff491c635eec41
- SHA1 df84a4ba65d369011e66149f0ad978986b8f4baf
- SHA512 91798ad356039f7b020f82a20a1f57929b59289d83e1ff4348030eab083904e849de5896bfdecea6801e20c5429a69223fd5097ad5954f6db4156f9b242d15ec
- SSDEEP 786432:CP3Whxic6wWTShgQ1Qp3F4oRh3Aq6hIwvwWwjE:2mHt+p3F4ShwRT
- TLSH T1FCF72852EEAB40F2DE0B4974904B722F63359E458B28CECBDB467D1AF9374C1587B206
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_da69a065b9f0c9a552ff491c635eec41_coinminer_elex_frostygoop_glassworm_hive_poet-rat_rex_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://tryyudjasudqo.shop/api
-
https://eemmbryequo.shop/api
-
https://reggwardssdqw.shop/api
-
https://relaxatinownio.shop/api
-
https://tesecuuweqo.shop/api
-
https://tendencctywop.shop/api
-
https://licenseodqwmqn.shop/api
-
https://keennylrwmqlw.shop/api
-
https://frightennywj.shop/api
Targets
-
- Target 2026-08-23_da69a065b9f0c9a552ff491c635eec41_coinminer_elex_frostygoop_glassworm_hive_poet-rat_rex_salatstealer_sliver_snatch
- Size 70.2MB
- SHA256 d21f3c1690492b1f7ee40abcb15705e2a433142b97156ccf8a6a6823112417dd
- MD5 da69a065b9f0c9a552ff491c635eec41
- SHA1 df84a4ba65d369011e66149f0ad978986b8f4baf
- SHA512 91798ad356039f7b020f82a20a1f57929b59289d83e1ff4348030eab083904e849de5896bfdecea6801e20c5429a69223fd5097ad5954f6db4156f9b242d15ec
- SSDEEP 786432:CP3Whxic6wWTShgQ1Qp3F4oRh3Aq6hIwvwWwjE:2mHt+p3F4ShwRT
- TLSH T1FCF72852EEAB40F2DE0B4974904B722F63359E458B28CECBDB467D1AF9374C1587B206
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of SetThreadContext