General
- Target 2026-09-16_bd28297075fcb06b0ed961a2571baa74_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 30.1MB
- Sample260916-v411batbnb
- SHA256 1affea792ba3c96b45fba21959007bfee813c61cca94a096a58860de006672f6
- MD5 bd28297075fcb06b0ed961a2571baa74
- SHA1 5777b5004b9f69e40d03c629aaadac8e31efeefe
- SHA512 c93dfa295ab2c89bdb7be23555127bb4bbc2ca0e39f2e567ae702e75e3aef505a989559356471cb354e954c5cf656ca0bad2346e6c04a83f9a97ccd1156bff58
- SSDEEP 393216:gk/S0AFaaUBP/AGgudqJlbYv2A5lAjLotBZsqxTDuJdpvQ0r/BYVqU:gkxAFaaZG9kbXA5lAV0TDuJdptr/BYE
- TLSH T15867BE47E87505E8C0AAD135C676A263BB717C894F3423D72B60F6242F72BD0AEB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_bd28297075fcb06b0ed961a2571baa74_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_bd28297075fcb06b0ed961a2571baa74_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_bd28297075fcb06b0ed961a2571baa74_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 30.1MB
- SHA256 1affea792ba3c96b45fba21959007bfee813c61cca94a096a58860de006672f6
- MD5 bd28297075fcb06b0ed961a2571baa74
- SHA1 5777b5004b9f69e40d03c629aaadac8e31efeefe
- SHA512 c93dfa295ab2c89bdb7be23555127bb4bbc2ca0e39f2e567ae702e75e3aef505a989559356471cb354e954c5cf656ca0bad2346e6c04a83f9a97ccd1156bff58
- SSDEEP 393216:gk/S0AFaaUBP/AGgudqJlbYv2A5lAjLotBZsqxTDuJdpvQ0r/BYVqU:gkxAFaaZG9kbXA5lAV0TDuJdptr/BYE
- TLSH T15867BE47E87505E8C0AAD135C676A263BB717C894F3423D72B60F6242F72BD0AEB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.