General
- Target 2026-08-23_9682bdb32877f74e3af0c84d58a42cbb_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch_zxxz
- Size 65.2MB
- Sample260824-fa359acp8z
- SHA256 dbb7296ade397fcf8953c665d49c5d248d913eafb6093538b54e85ecb114d7b7
- MD5 9682bdb32877f74e3af0c84d58a42cbb
- SHA1 47e75f2d000239f1e182c54d729b0f70b275b6e7
- SHA512 37e64680223b09ed6f118dc17eba4879237503b0a66eabbec008cba0b41a773e6349490e85264d5e679e8c307054cc61f161bca8024018fe8457ceb58d5a76f9
- SSDEEP 196608:XX98OaVzP4IcDsntgGEuvUPK01khl2MqGT8nd:f4VZnbpUPLFqud
- TLSH T1EBE75C51FAC794F5E9038576506BB22F23345D058F28CBDBEB047E6AF9376D2183224A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_9682bdb32877f74e3af0c84d58a42cbb_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salats.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
lumma
C2
-
https://caffegclasiqwp.shop/api
-
https://stamppreewntnq.shop/api
-
https://stagedchheiqwo.shop/api
-
https://millyscroqwp.shop/api
-
https://evoliutwoqm.shop/api
-
https://condedqpwqm.shop/api
-
https://traineiwnqo.shop/api
-
https://locatedblsoqp.shop/api
-
https://securedosqpsn.shop/api
Targets
-
- Target 2026-08-23_9682bdb32877f74e3af0c84d58a42cbb_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch_zxxz
- Size 65.2MB
- SHA256 dbb7296ade397fcf8953c665d49c5d248d913eafb6093538b54e85ecb114d7b7
- MD5 9682bdb32877f74e3af0c84d58a42cbb
- SHA1 47e75f2d000239f1e182c54d729b0f70b275b6e7
- SHA512 37e64680223b09ed6f118dc17eba4879237503b0a66eabbec008cba0b41a773e6349490e85264d5e679e8c307054cc61f161bca8024018fe8457ceb58d5a76f9
- SSDEEP 196608:XX98OaVzP4IcDsntgGEuvUPK01khl2MqGT8nd:f4VZnbpUPLFqud
- TLSH T1EBE75C51FAC794F5E9038576506BB22F23345D058F28CBDBEB047E6AF9376D2183224A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of SetThreadContext