General

  • Target
    2026-07-08_50cf5b4eb0b43d08455a381b05f4a4d3_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
  • Size 11.3MB
  • Sample260708-e9yjdabx2q
  • SHA256 34ad97945a1f70cdbf8af7777a6c71c990d841840cf3c94a387f6cc83450ad4b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-08_50cf5b4eb0b43d08455a381b05f4a4d3_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
    • Size 11.3MB
    • SHA256 34ad97945a1f70cdbf8af7777a6c71c990d841840cf3c94a387f6cc83450ad4b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks