683ceb457a4896b0631594673d3c83c3c7cabfcb0a1ce4fa2a915d104c0bb6a7 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-10-22...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_925a767bc0a037da4563aa5ed6ce0233_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer_njrat_poet-rat_quasar-rat_sliver_snatch
Size 28.8MB
Sample261024-e7bltsw17n
SHA256 683ceb457a4896b0631594673d3c83c3c7cabfcb0a1ce4fa2a915d104c0bb6a7
MD5 925a767bc0a037da4563aa5ed6ce0233
SHA1 0d2216b1abfde8f525bdefd6250d03aef640cd2d
SHA512 7a24071587e5638d9c7c446a976d84c5dc73537a9d2022e7e345f9c27f5393a387516f9b29c81cfb121e74412557af6f4b29837b1ec1de92e8f8395f5a76aeb7
SSDEEP 196608:Hb84eu8Rv+A9nuEinP/9kjn27ywvZdR0UUjuDJRNNGB9T/jKKw3Gno:7jn8RvrnliP/9kwvZQiGB9T2KHn
TLSH
T106675953F86508E4E0AED130C9729213BB717C5A573123D73B58B6206F7BBD0AABA354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-10-22_925a767bc0a037da4563aa5ed6ce0233_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

18 signatures

150 seconds

defense_evasion discovery execution spyware trojan

Malware Config

Targets

- Target
  2026-10-22_925a767bc0a037da4563aa5ed6ce0233_amadey_coinminer_dosia_glassworm_hellokitty_luca-stealer_njrat_poet-rat_quasar-rat_sliver_snatch
- Size 28.8MB
- SHA256 683ceb457a4896b0631594673d3c83c3c7cabfcb0a1ce4fa2a915d104c0bb6a7
- MD5 925a767bc0a037da4563aa5ed6ce0233
- SHA1 0d2216b1abfde8f525bdefd6250d03aef640cd2d
- SHA512 7a24071587e5638d9c7c446a976d84c5dc73537a9d2022e7e345f9c27f5393a387516f9b29c81cfb121e74412557af6f4b29837b1ec1de92e8f8395f5a76aeb7
- SSDEEP 196608:Hb84eu8Rv+A9nuEinP/9kjn27ywvZdR0UUjuDJRNNGB9T/jKKw3Gno:7jn8RvrnliP/9kwvZQiGB9T2KHn
- TLSH
  T106675953F86508E4E0AED130C9729213BB717C5A573123D73B58B6206F7BBD0AABA354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware trojan
- Deletes itself
  defense_evasion
- Executes dropped EXE
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Indicator Removal

File Deletion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionspywaretrojan

© 2018-2026

Terms | Privacy