General

  • Target
    2026-08-21_6b1d212aeb38b78311e162f6def1e371_coinminer_frostygoop_ghostlocker_glassworm_luca-stealer_poet-rat_salatstealer_sliver
  • Size 29.8MB
  • Sample260822-qmskdshj2s
  • SHA256 8da478570548fada67e30ef759d82c76d27b343bfd87ccbbed7312b3f51d6c30
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      2026-08-21_6b1d212aeb38b78311e162f6def1e371_coinminer_frostygoop_ghostlocker_glassworm_luca-stealer_poet-rat_salatstealer_sliver
    • Size 29.8MB
    • SHA256 8da478570548fada67e30ef759d82c76d27b343bfd87ccbbed7312b3f51d6c30
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Detects DarkSideRAT

    • Family: DarkSideRAT

      DarkSideRAT is a remote access trojan.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks