General
- Target 2026-10-16_6889b65b52994c296031e4d35c3ca1c6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 12.7MB
- Sample261017-s2bljaff76
- SHA256 d5f9b8a951acf311269fccb4f2ed6e4674449a3e304815ed6257e320dedbeb37
- MD5 6889b65b52994c296031e4d35c3ca1c6
- SHA1 1b99513b7d648e929150a682de5b8058c82e4be1
- SHA512 f67e07b07abffc2741e5998df06ab815f3d4d0d8161897e3bb05a44c35bfcaccfa858b6ed8cea421bcd992521aef5bebdbd331ce9e98570e08ac9ecaa6c59183
- SSDEEP 98304:oKMoMLZcpZE/Pn3NGNHoPy3beqBnZlmOj6EGRGNNK/zFEYDBvIdj:oN9p/P3NGNiyaq1ZspEUMoaIp8
- TLSH T19FD65A57EC6545E9D0EAD1308A769253BBB17C494B3023DB6B60F3242F72BE09EB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_6889b65b52994c296031e4d35c3ca1c6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_6889b65b52994c296031e4d35c3ca1c6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 12.7MB
- SHA256 d5f9b8a951acf311269fccb4f2ed6e4674449a3e304815ed6257e320dedbeb37
- MD5 6889b65b52994c296031e4d35c3ca1c6
- SHA1 1b99513b7d648e929150a682de5b8058c82e4be1
- SHA512 f67e07b07abffc2741e5998df06ab815f3d4d0d8161897e3bb05a44c35bfcaccfa858b6ed8cea421bcd992521aef5bebdbd331ce9e98570e08ac9ecaa6c59183
- SSDEEP 98304:oKMoMLZcpZE/Pn3NGNHoPy3beqBnZlmOj6EGRGNNK/zFEYDBvIdj:oN9p/P3NGNiyaq1ZspEUMoaIp8
- TLSH T19FD65A57EC6545E9D0EAD1308A769253BBB17C494B3023DB6B60F3242F72BE09EB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1