General
- Target 2026-09-24_68626cb4a813827c64e1300aaca533c4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.6MB
- Sample260925-jyaemawvdt
- SHA256 1ed988a13b7df7deb8d4cc83570c3f188995dabbc791fdb9c26711249b5780f3
- MD5 68626cb4a813827c64e1300aaca533c4
- SHA1 4f51c1d3f933ccaa575d8b8690360b78ed8400d7
- SHA512 72e6a4fe9fc3621ac11be3cf633c297cef0aa98a9778f6b7b3c440d8bb7e4b659ba85762c954d1ac556a964a2787e58c3490862f9b080e9959a9b1e4187b6a11
- SSDEEP 49152:ctnVmMnn4Feq2Yb352MH9rJ/WtJBOf/g6mrm6qrVNPYZEm9pkWsQUYf4Capun+K:cuFeKQJBZy6sVtm94Pg6uZoWfMtERP
- TLSH T13CB66A0BE8A605E5C5E9D1348A668253BF707C489B3133D72B60F3686F77BD06AB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-24_68626cb4a813827c64e1300aaca533c4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_68626cb4a813827c64e1300aaca533c4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_68626cb4a813827c64e1300aaca533c4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.6MB
- SHA256 1ed988a13b7df7deb8d4cc83570c3f188995dabbc791fdb9c26711249b5780f3
- MD5 68626cb4a813827c64e1300aaca533c4
- SHA1 4f51c1d3f933ccaa575d8b8690360b78ed8400d7
- SHA512 72e6a4fe9fc3621ac11be3cf633c297cef0aa98a9778f6b7b3c440d8bb7e4b659ba85762c954d1ac556a964a2787e58c3490862f9b080e9959a9b1e4187b6a11
- SSDEEP 49152:ctnVmMnn4Feq2Yb352MH9rJ/WtJBOf/g6mrm6qrVNPYZEm9pkWsQUYf4Capun+K:cuFeKQJBZy6sVtm94Pg6uZoWfMtERP
- TLSH T13CB66A0BE8A605E5C5E9D1348A668253BF707C489B3133D72B60F3686F77BD06AB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.