General

  • Target
    2026-08-16_9475eb9932bd7da4e069ec1635a95ac7_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
  • Size 8.0MB
  • Sample260816-chqcksysf1
  • SHA256 7b26e34abce55a023b7eabb51669a1571ca5fcca4af3e991a72fbdaf9a44e4ec
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-16_9475eb9932bd7da4e069ec1635a95ac7_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
    • Size 8.0MB
    • SHA256 7b26e34abce55a023b7eabb51669a1571ca5fcca4af3e991a72fbdaf9a44e4ec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Adds Run key to start application

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks