Resubmissions

25/06/2026, 06:59

260625-hselqaat4q10

16/01/2026, 19:32

260116-x856yaey5b7

General

  • Target
    2026-01-16_5008d6b2bf12a37a45b1315e534be050_coinminer_dosia_frostygoop_glassworm_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
  • Size 5.5MB
  • Sample260625-hselqaat4q
  • SHA256 e39b7b6f2f7041b1791792a23a8fbe88cf720f89b0e68443d7f275fc2cc840e8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • lissac2

C2
  • ws://179.43.186.239:7990/ws

Targets

    • Target
      2026-01-16_5008d6b2bf12a37a45b1315e534be050_coinminer_dosia_frostygoop_glassworm_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
    • Size 5.5MB
    • SHA256 e39b7b6f2f7041b1791792a23a8fbe88cf720f89b0e68443d7f275fc2cc840e8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: LissaC2

      LissaC2 is a backdoor written in Golang.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks