2026-04-02_05e9d6d239ea29f0427b02a9bc903be7_amadey_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_njrat_quasar-rat_salatstealer_sliver_smoke-loader
Classification: Malicious
2026-04-02_05e9d6d239ea29f0427b02a9bc903be7_amadey_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_njrat_quasar-rat_salatstealer_sliver_smoke-l…
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: THE GENTLEMEN (G1058)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-08-13 10:06:47 | 2026-08-13 10:06:47 | malicious-activity | |
| Gentlemen | Triage | 2026-06-04 14:45:31 | 2026-06-04 14:45:31 | malicious-activity | |
| Gentlemen | ThreatFox Abuse.ch | 2026-05-13 15:06:14 | 2026-05-13 15:25:05 | ||
| The Gentlemen ransomware Windows encryptor payload | Check Point Research | 2026-05-13 00:00:00 | 2026-05-13 00:00:00 | malicious-activity | G1058 The Gentlemen |
| Generic Malware | Triage | 2026-04-02 08:46:32 | 2026-04-02 08:46:32 | malicious-activity |
Tags
execution win.gentlemen gentlemen ransomware payload the-gentlemenSample information
- Filenames
- 87d25d0e5880b3b5cd30106853cbfc6ef1ad38966b30d9bd5b99df46098e546c, 2026-04-02_05e9d6d239ea29f0427b02a9bc903be7_amadey_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_njrat_quasar-rat_salatstealer_sliver_smoke-loader
- MD5
05e9d6d239ea29f0427b02a9bc903be7- SHA-1
23a468d7277902384875d4167a81164bc2bf6e72- SHA-256
87d25d0e5880b3b5cd30106853cbfc6ef1ad38966b30d9bd5b99df46098e546c- First indexed
- 2025-09-09 00:00:00
- Last updated
- 2026-08-13 10:06:47