General

  • Target
    2026-08-20_529c6ef7a1ee81f67302cad5dbd5c1fd_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
  • Size 4.6MB
  • Sample260820-j3xeyscb88
  • SHA256 8a3d0e4d20896c34e257f5079b00fb5d02197233aef05420ca03c9dd4f9293a9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • cobaltstrike

C2
  • http://129.211.13.156:44312/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0

Targets

    • Target
      2026-08-20_529c6ef7a1ee81f67302cad5dbd5c1fd_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
    • Size 4.6MB
    • SHA256 8a3d0e4d20896c34e257f5079b00fb5d02197233aef05420ca03c9dd4f9293a9
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Matrix

Tasks