General

  • Target
    2026-07-07_b329833bdea3bbd255ee8d0a8cc3ef5a_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_luca-stealer_njrat_poet-rat_quasar-rat_salatstealer_sliver_snatch
  • Size 56.1MB
  • Sample260707-2qphpafv4t
  • SHA256 f850cad3cb724b4842c930ad0a070c2e8e4fcad50833a0abe4c9695f95a5c759
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-07_b329833bdea3bbd255ee8d0a8cc3ef5a_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_luca-stealer_njrat_poet-rat_quasar-rat_salatstealer_sliver_snatch
    • Size 56.1MB
    • SHA256 f850cad3cb724b4842c930ad0a070c2e8e4fcad50833a0abe4c9695f95a5c759
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Network Share Discovery

      Attempt to gather information on host network.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks