General
- Target 2026-10-16_6cf72e6600e519b81ec8bd8d7782b4c4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 17.1MB
- Sample261017-skgffsfe79
- SHA256 a72317a6f4d5b0521c2f9dd60a50080cb11b9acbd157f7ee9f8f40588f73bb3f
- MD5 6cf72e6600e519b81ec8bd8d7782b4c4
- SHA1 fa646728bab1c22a06d40a05045c692cc7002566
- SHA512 679be9c3db55bad2c1a0e3a94d097d85f57aa17cb2a337524c312f8bd1a68c3e937350458336576c29553c2d704eacda99b0c4ec9063a29137be0498a8a192ec
- SSDEEP 98304:38gPF7RMxn0YoRT79SULdbEOxCwYHGvzTvGPehuGu2R6chxEj7McE:3TPoxnLoRT7EOdVGGhQ6w7O
- TLSH T1F1075B43E8A505E9C0A9D135C6669662BF717C895B3023D33F54FB382F76BD0AAB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-16_6cf72e6600e519b81ec8bd8d7782b4c4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_6cf72e6600e519b81ec8bd8d7782b4c4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_6cf72e6600e519b81ec8bd8d7782b4c4_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 17.1MB
- SHA256 a72317a6f4d5b0521c2f9dd60a50080cb11b9acbd157f7ee9f8f40588f73bb3f
- MD5 6cf72e6600e519b81ec8bd8d7782b4c4
- SHA1 fa646728bab1c22a06d40a05045c692cc7002566
- SHA512 679be9c3db55bad2c1a0e3a94d097d85f57aa17cb2a337524c312f8bd1a68c3e937350458336576c29553c2d704eacda99b0c4ec9063a29137be0498a8a192ec
- SSDEEP 98304:38gPF7RMxn0YoRT79SULdbEOxCwYHGvzTvGPehuGu2R6chxEj7McE:3TPoxnLoRT7EOdVGGhQ6w7O
- TLSH T1F1075B43E8A505E9C0A9D135C6669662BF717C895B3023D33F54FB382F76BD0AAB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.