General
- Target 2026-09-10_c211ea3adbb8c8d85cb20a0070aefcc7_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.7MB
- Sample260910-m5akravzbt
- SHA256 99bd45d5f0cb6ab86c409949d2e1f81687b865af882a79ea0d9c6f4aa604cf46
- MD5 c211ea3adbb8c8d85cb20a0070aefcc7
- SHA1 520cd0e8a45f11ed1f5b3308fc2d19f8d41e6bd1
- SHA512 2d59efcc30962def8f7f156408cdb68eeb00d82663f1ce9d897c74bc665bcd92a8d21d22f5d7fbeeb325bf755ae0acf9030968bcb9c33a99e0ff084e7038ce9c
- SSDEEP 49152:dMzy/CJByG2rjPviCF+/nwxM8IOPU4L/muGrXgu9RaTmE01jO5EkMoK1sRvXSV06:jCGjjpspcU4L/wb/EvEkNBi1U
- TLSH T179564A47FCA501A9C0EED23189669262BE717C585F3063D73BA0F7682F76BD06AB5340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_c211ea3adbb8c8d85cb20a0070aefcc7_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_c211ea3adbb8c8d85cb20a0070aefcc7_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_p.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_c211ea3adbb8c8d85cb20a0070aefcc7_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.7MB
- SHA256 99bd45d5f0cb6ab86c409949d2e1f81687b865af882a79ea0d9c6f4aa604cf46
- MD5 c211ea3adbb8c8d85cb20a0070aefcc7
- SHA1 520cd0e8a45f11ed1f5b3308fc2d19f8d41e6bd1
- SHA512 2d59efcc30962def8f7f156408cdb68eeb00d82663f1ce9d897c74bc665bcd92a8d21d22f5d7fbeeb325bf755ae0acf9030968bcb9c33a99e0ff084e7038ce9c
- SSDEEP 49152:dMzy/CJByG2rjPviCF+/nwxM8IOPU4L/muGrXgu9RaTmE01jO5EkMoK1sRvXSV06:jCGjjpspcU4L/wb/EvEkNBi1U
- TLSH T179564A47FCA501A9C0EED23189669262BE717C585F3063D73BA0F7682F76BD06AB5340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Adds Run key to start application