General
- Target 2026-10-26_946f237d34ddc4a14d76fa184ad8b7cd_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch_vidar
- Size 10.3MB
- Sample261027-npyhbatves
- SHA256 1fdaac46499d97593b30c05bc02c0fc59c62e0b04ec78a99a190fb4ee5be7f0b
- MD5 946f237d34ddc4a14d76fa184ad8b7cd
- SHA1 e35257976d75feb671fa10eed60813cc2552ac82
- SHA512 ef394cf8e82875b454f3c5a9c829fccabdfcad65636125c1ee6612ed1b02bb3fc4f14663586210c2f904ada0a7f92d20f596da2cb923a118029032a4c1880475
- SSDEEP 98304:uhJBkIui5TRgiUqfyXLR5kuQJkR22DvG7E:uhJeI/5TRTdfynkhG/Go
- TLSH T18FB69D03E85125E9C5AAD6748A668253BB723C495B3173C77B50F3692FF3BE05AB9300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_946f237d34ddc4a14d76fa184ad8b7cd_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_946f237d34ddc4a14d76fa184ad8b7cd_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_946f237d34ddc4a14d76fa184ad8b7cd_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch_vidar
- Size 10.3MB
- SHA256 1fdaac46499d97593b30c05bc02c0fc59c62e0b04ec78a99a190fb4ee5be7f0b
- MD5 946f237d34ddc4a14d76fa184ad8b7cd
- SHA1 e35257976d75feb671fa10eed60813cc2552ac82
- SHA512 ef394cf8e82875b454f3c5a9c829fccabdfcad65636125c1ee6612ed1b02bb3fc4f14663586210c2f904ada0a7f92d20f596da2cb923a118029032a4c1880475
- SSDEEP 98304:uhJBkIui5TRgiUqfyXLR5kuQJkR22DvG7E:uhJeI/5TRTdfynkhG/Go
- TLSH T18FB69D03E85125E9C5AAD6748A668253BB723C495B3173C77B50F3692FF3BE05AB9300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Uses WMI to collect hardware manufacturer information
Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.