Overview

overview

8

Static

static

3

2026-07-02...at.exe

windows10-2004-x64

8

2026-07-02...at.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-02_2dd71dd14e15d1c39f74a21316736a85_coinminer_dosia_ghostlocker_glassworm_luca-stealer_poet-rat_quasar-rat
  • Size 19.0MB
  • Sample260702-jp3ptacw3j
  • SHA256 6ce43f931b0cc25a2733fa3983b27373eb069f427c37bf9f9525f189d8453a3f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarecredential_accessdiscoverypersistenceransomwarespywarestealer

Malware Config

Targets

    • Target
      2026-07-02_2dd71dd14e15d1c39f74a21316736a85_coinminer_dosia_ghostlocker_glassworm_luca-stealer_poet-rat_quasar-rat
    • Size 19.0MB
    • SHA256 6ce43f931b0cc25a2733fa3983b27373eb069f427c37bf9f9525f189d8453a3f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    credential_accessdiscoverystealeradwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Uses browser remote debugging

      Can be used control the browser and steal sensitive information such as credentials and session cookies.

      credential_accessstealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks