General

  • Target
    2026-06-26_a246d732b8e4995f39c4930872d9fafd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
  • Size 2.1MB
  • Sample260629-qsekqaev61
  • SHA256 f92153b7248fa6a46ce2ecd0b2559a37441e67ef70a79a555ae174dc822d53cb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • adaptixc2

Attributes
  • private_ip

    192.168.1.96

  • url_path

    /updates/check.php

  • user_agent

    Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0

Targets

    • Target
      2026-06-26_a246d732b8e4995f39c4930872d9fafd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
    • Size 2.1MB
    • SHA256 f92153b7248fa6a46ce2ecd0b2559a37441e67ef70a79a555ae174dc822d53cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: AdaptixC2

      AdaptixC2 is an open-source C2 framework written in C++.

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks