General

  • Target
    2026-06-04_dacfa5ad4610688bc3045e73820cd7b0_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
  • Size 34.6MB
  • Sample260604-txadcaay8y
  • SHA256 a727b07a550778d0d8897c152d522f4fb59e5267f38c0718f5e8585f47328f7f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-06-04_dacfa5ad4610688bc3045e73820cd7b0_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
    • Size 34.6MB
    • SHA256 a727b07a550778d0d8897c152d522f4fb59e5267f38c0718f5e8585f47328f7f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Checks whether UAC is enabled

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Command and Scripting Interpreter: PowerShell

      Start PowerShell.

MITRE ATT&CK Enterprise v16

Tasks