General
- Target 2026-09-01_015498187b7b0ca25235d3a5b093656d_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 8.1MB
- Sample260901-2dx93afa83
- SHA256 148fd3f9c83a7709637aa27b81fc2aba5b0dbac5945f601c55e5484f42f33d44
- MD5 015498187b7b0ca25235d3a5b093656d
- SHA1 1599ceafc01e2a25ed7d9762f43dc9b95b3747d6
- SHA512 bae334860e82e1a2bdc79427ea57bd69e51ba96744f1a7f1d91302b4299c94308aa9864bdb41a7bcc38699737ba1d1bc853ea109c6a7307134e7a6d5be8bfa63
- SSDEEP 98304:J5q3f2GAGTxED4cXNkg/p4MWWtvEH2GG6OCGdOZ7ZEq/sYO:Kv2GAmSHWWSHZG6OCD9ZXsYO
- TLSH T122867C07E89559A9C1AED231C9B292537B71BC484B3223D72B60F73D2F76BD46A79300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_015498187b7b0ca25235d3a5b093656d_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_015498187b7b0ca25235d3a5b093656d_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_015498187b7b0ca25235d3a5b093656d_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 8.1MB
- SHA256 148fd3f9c83a7709637aa27b81fc2aba5b0dbac5945f601c55e5484f42f33d44
- MD5 015498187b7b0ca25235d3a5b093656d
- SHA1 1599ceafc01e2a25ed7d9762f43dc9b95b3747d6
- SHA512 bae334860e82e1a2bdc79427ea57bd69e51ba96744f1a7f1d91302b4299c94308aa9864bdb41a7bcc38699737ba1d1bc853ea109c6a7307134e7a6d5be8bfa63
- SSDEEP 98304:J5q3f2GAGTxED4cXNkg/p4MWWtvEH2GG6OCGdOZ7ZEq/sYO:Kv2GAmSHWWSHZG6OCD9ZXsYO
- TLSH T122867C07E89559A9C1AED231C9B292537B71BC484B3223D72B60F73D2F76BD46A79300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Executes dropped EXE
-
Loads dropped DLL