General

  • Target
    2026-08-20_90f36aeed193a2e83eb933a0e191c3a6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
  • Size 21.4MB
  • Sample260820-gdlwtas1fs
  • SHA256 487298432ab6baaad3b58e31161669329559ab80f7cbc0c8c528085b11ac70e2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-20_90f36aeed193a2e83eb933a0e191c3a6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
    • Size 21.4MB
    • SHA256 487298432ab6baaad3b58e31161669329559ab80f7cbc0c8c528085b11ac70e2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Sparkrat

      Sparkrat is a cross-platfrom backdoor written in Golang.

    • family_sparkrat

      Detects Sparkrat payload

    • Detects Windows executables referencing non-Windows User-Agents

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks