General
- Target 2026-08-26_f4974d6888495206f87c339dcc55e8d4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 7.8MB
- Sample260827-cvhs9syfle
- SHA256 96be24e71ab066e41edf8c4a3a74aced73c82b63585ba686d97a8e2cf9d51a86
- MD5 f4974d6888495206f87c339dcc55e8d4
- SHA1 d7b93510d05a7e66574a89277de8aa1256601111
- SHA512 8a40cd7d0aa4cf9a29e7d5b70406b7de7dd966349c7a17c2cfaf3db7aa3d83d5a122d9aef67308b00c17516248e6eb09fc7526bb901c052cfaa7fec695b744e2
- SSDEEP 49152:KvnJJggG5SDlfwTsLWQCWWjQ5F2gauKgBcFokrZeHtWCLOfxc4bR8/NoSKGnNLHk:KPCz5lkIFogeHlhIukZncdbvNE
- TLSH T19F8639C7FCA119E8C0A9933985629253BB713C485B3527D32A90FF282F76BD06E75790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-26_f4974d6888495206f87c339dcc55e8d4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_f4974d6888495206f87c339dcc55e8d4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_f4974d6888495206f87c339dcc55e8d4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 7.8MB
- SHA256 96be24e71ab066e41edf8c4a3a74aced73c82b63585ba686d97a8e2cf9d51a86
- MD5 f4974d6888495206f87c339dcc55e8d4
- SHA1 d7b93510d05a7e66574a89277de8aa1256601111
- SHA512 8a40cd7d0aa4cf9a29e7d5b70406b7de7dd966349c7a17c2cfaf3db7aa3d83d5a122d9aef67308b00c17516248e6eb09fc7526bb901c052cfaa7fec695b744e2
- SSDEEP 49152:KvnJJggG5SDlfwTsLWQCWWjQ5F2gauKgBcFokrZeHtWCLOfxc4bR8/NoSKGnNLHk:KPCz5lkIFogeHlhIukZncdbvNE
- TLSH T19F8639C7FCA119E8C0A9933985629253BB713C485B3527D32A90FF282F76BD06E75790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.