Overview

overview

10

Static

static

10

2026-08-20...st.exe

windows10-2004-x64

7

2026-08-20...st.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-20_11936f2625d8b1df33ffa0a10fe01bf8_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
  • Size 9.7MB
  • Sample260820-16txnsbn2y
  • SHA256 c4e471f6c53f5c75760cfcd5e709cfb447b06495df09a29ad2f20c501e78cc60
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
credential_accessdefense_evasiondiscoveryspywarestealer

Malware Config

Targets

    • Target
      2026-08-20_11936f2625d8b1df33ffa0a10fe01bf8_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
    • Size 9.7MB
    • SHA256 c4e471f6c53f5c75760cfcd5e709cfb447b06495df09a29ad2f20c501e78cc60
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    credential_accessdefense_evasiondiscoveryspywarestealer

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks