02e90a8321fffd0c45e88bcb8aec3839c5971eb3ded89dd9e44960ef48c95564 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

2026-07-08...t_.exe

windows10-2004-x64

8

2026-07-08...t_.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_6f1f9815b3fc3b3dfdc77f57273aedac_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_luca-stealer_njrat_poet-rat_quasar-rat_salatstealer_sliver_snatch
Size 13.5MB
Sample260708-e54jtsbw4k
SHA256 02e90a8321fffd0c45e88bcb8aec3839c5971eb3ded89dd9e44960ef48c95564
MD5 6f1f9815b3fc3b3dfdc77f57273aedac
SHA1 a939c1559eb3f942d441d5cc649bb7820cfc8470
SHA512 2507da63962ee3c9f57b86e7c1d20a29f41681fa84db58433174412995c25e0bb014fc1ad33b73eda5bcf81673880c87b8528b0727d0768d1c531eca927e6367
SSDEEP 196608:XeNSE051muG/pNUJB0HXZ2vM8zfz94hnJY5igsG4ho74Q:XeNSr1gnSVvMCfWhJtG4ho7z
TLSH
T1ABE6BF07EC9515E9C4AEE234CA229253BA717C496B3173D72B90F7282F77BD06A79700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-08_6f1f9815b3fc3b3dfdc77f57273aedac_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion persistence privilege_escalation

Behavioral task

behavioral2

Sample

2026-07-08_6f1f9815b3fc3b3dfdc77f57273aedac_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_.exe

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion persistence privilege_escalation

Malware Config

Targets

- Target
  2026-07-08_6f1f9815b3fc3b3dfdc77f57273aedac_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_luca-stealer_njrat_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 13.5MB
- SHA256 02e90a8321fffd0c45e88bcb8aec3839c5971eb3ded89dd9e44960ef48c95564
- MD5 6f1f9815b3fc3b3dfdc77f57273aedac
- SHA1 a939c1559eb3f942d441d5cc649bb7820cfc8470
- SHA512 2507da63962ee3c9f57b86e7c1d20a29f41681fa84db58433174412995c25e0bb014fc1ad33b73eda5bcf81673880c87b8528b0727d0768d1c531eca927e6367
- SSDEEP 196608:XeNSE051muG/pNUJB0HXZ2vM8zfz94hnJY5igsG4ho74Q:XeNSr1gnSVvMCfWhJtG4ho7z
- TLSH
  T1ABE6BF07EC9515E9C4AEE234CA229253BA717C496B3173D72B90F7282F77BD06A79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionpersistenceprivilege_escalation

behavioral2

defense_evasionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy