General

  • Target
    2026-10-26_946f237d34ddc4a14d76fa184ad8b7cd_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch_vidar
  • Size 10.3MB
  • Sample261027-npyhbatves
  • SHA256 1fdaac46499d97593b30c05bc02c0fc59c62e0b04ec78a99a190fb4ee5be7f0b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-26_946f237d34ddc4a14d76fa184ad8b7cd_coinminer_dosia_frostygoop_glassworm_hive_icedid_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch_vidar
    • Size 10.3MB
    • SHA256 1fdaac46499d97593b30c05bc02c0fc59c62e0b04ec78a99a190fb4ee5be7f0b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks whether UAC is enabled

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Uses WMI to collect hardware manufacturer information

      Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.

MITRE ATT&CK Enterprise v16

Tasks