General
- Target 2026-10-28_bd31f2c0765e2cf77328cea810f22756_coinminer_dosia_frostygoop_glassworm_hive_http-browser_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 7.2MB
- Sample261029-yjehcssxbw
- SHA256 570468facd275c37d284d31752d65f2de1a7c96238a2190d683b9d02b6709148
- MD5 bd31f2c0765e2cf77328cea810f22756
- SHA1 f7d43d2e1c28c283e5dc4c7aa8c634a89d527e85
- SHA512 900c9d044d466d375a4a29f4b964be0afa287abdf4f8d04ada4abf4f7e388b2f325199e736e9eafd1f94c404cd2bc578dd6c7db9cc17b4f3f8d523b088948bd8
- SSDEEP 98304:PoCPY4+8yIyuEs0H2g8acXB4wFRZeqSariQc:A4+8y5sKzcx4wfZeV79
- TLSH T179767B07F8A545E8C0EED231C9629253BB717C895B3127D72BA0F7282F76BD4AA75310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-28_bd31f2c0765e2cf77328cea810f22756_coinminer_dosia_frostygoop_glassworm_hive_http-browser_l.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_bd31f2c0765e2cf77328cea810f22756_coinminer_dosia_frostygoop_glassworm_hive_http-browser_l.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_bd31f2c0765e2cf77328cea810f22756_coinminer_dosia_frostygoop_glassworm_hive_http-browser_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 7.2MB
- SHA256 570468facd275c37d284d31752d65f2de1a7c96238a2190d683b9d02b6709148
- MD5 bd31f2c0765e2cf77328cea810f22756
- SHA1 f7d43d2e1c28c283e5dc4c7aa8c634a89d527e85
- SHA512 900c9d044d466d375a4a29f4b964be0afa287abdf4f8d04ada4abf4f7e388b2f325199e736e9eafd1f94c404cd2bc578dd6c7db9cc17b4f3f8d523b088948bd8
- SSDEEP 98304:PoCPY4+8yIyuEs0H2g8acXB4wFRZeqSariQc:A4+8y5sKzcx4wfZeV79
- TLSH T179767B07F8A545E8C0EED231C9629253BB717C895B3127D72BA0F7282F76BD4AA75310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.