General
- Target 2026-08-23_7687e73b769e52a53d1253674c05f556_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 9.4MB
- Sample260824-kfknbace92
- SHA256 4730594aaab7e0d39f3108e3b458107617760f5d0986558d385d5446abd291c7
- MD5 7687e73b769e52a53d1253674c05f556
- SHA1 9580deb89df33bb2004054af6cdc34f13b3960d5
- SHA512 53e0132df73fac4ddb65e4ad8376ed6acecaa47533da2f250313a1583a676d9f32692831b41447331f0b4d27fdf5632980e0489604b3054f68f5cd2de9b17427
- SSDEEP 98304:MI/7u5H05eEaUVyLWpaM3L9DG9iy9wNvIDZyv5:1u5HoKM39GEIo
- TLSH T146A68C47EC9505E9D0A9E630C6B69253BB717C494B3623D32B60B3393F76BD0AA79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_7687e73b769e52a53d1253674c05f556_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_7687e73b769e52a53d1253674c05f556_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_7687e73b769e52a53d1253674c05f556_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 9.4MB
- SHA256 4730594aaab7e0d39f3108e3b458107617760f5d0986558d385d5446abd291c7
- MD5 7687e73b769e52a53d1253674c05f556
- SHA1 9580deb89df33bb2004054af6cdc34f13b3960d5
- SHA512 53e0132df73fac4ddb65e4ad8376ed6acecaa47533da2f250313a1583a676d9f32692831b41447331f0b4d27fdf5632980e0489604b3054f68f5cd2de9b17427
- SSDEEP 98304:MI/7u5H05eEaUVyLWpaM3L9DG9iy9wNvIDZyv5:1u5HoKM39GEIo
- TLSH T146A68C47EC9505E9D0A9E630C6B69253BB717C494B3623D32B60B3393F76BD0AA79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.