Case Management

Cryptocurrency — Malware

CASE-20260822-E573 MEDIUM OPEN Assignee: unassigned · Opened 13h ago

Opened from malware Cryptocurrency

🔄 Pivot:📁 malware🦠 Cryptocurrency

Entities

48
linked to case

IoCs

47
indicators

Entity types

2
dimensions

Evidence events

3
chain of custody

➕ Add anything to this case

Attach any entity — region, country, APT, source, MITRE technique, IoC, nation-state, campaign, data point, mission domain, CVE, malware, ransomware — and all linked entities are pulled in automatically.

🔎 IoC (47)

IndicatorRoleSource
3d11924aae8ca69924a8102e81b7e180indicatorpivotsearch · workbench
c93129131e775d9a633dd62f99ef5756c3c5c0e00eb8da26f57c24a9987findicatorpivotsearch · workbench
d416f210b97f28c96839940938580cadindicatorpivotsearch · workbench
ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777indicatorpivotsearch · workbench
df3290f5aeb13df6eb66981d998ea743031cfa0a8e77f16f71b8c0b7805bindicatorpivotsearch · workbench
e2506b25c22b57db563ed8b40099c3aa033f45183e2536496004a1e9d6b7indicatorpivotsearch · workbench
c99b67473529b5fe6306bd1b4d8a515e8bd5feb173b84e0d43072e4dcac8indicatorpivotsearch · workbench
467d892ad88b45a8a112538a430e1caaa98a6df1dcffe21395eb6d23eb29indicatorpivotsearch · workbench
f77faf82e9409ed7b3027c91b8107e223f83ab23864bee39495e9b9b23a1indicatorpivotsearch · workbench
8ef8c2e63fd68bf1a675909dd6f1d678indicatorpivotsearch · workbench
ac59174079a58da92abc82d88bfd6273c5bbb3318cd0f1725cf01ebd6454indicatorpivotsearch · workbench
d41d8cd98f00b204e9800998ecf8427eindicatorpivotsearch · workbench
E426D639DCF2E40B0026D7651921523Findicatorpivotsearch · workbench
4140fa01cf3a886449c28e556b5f2e8e4a25baadab7a0dc6fbcf16385384indicatorpivotsearch · workbench
d76e7a14ab20d3f28de1ecef803d8b1629ed077495db5ec7b7f5828ed33cindicatorpivotsearch · workbench
3cf56a5ef3afb3091c824dd517c2526c352bc46ee5bc7384d385b3523a30indicatorpivotsearch · workbench
ca71c5a2b40e2c747b6bd860a3bc7a1b51fb6532a4dbd5fba550d3827bf9indicatorpivotsearch · workbench
e43f46dab6177d69a21113553382f309indicatorpivotsearch · workbench
26821d0ffc00ff0cdb591df87e509811020a036c9684e2c9c65424229b5bindicatorpivotsearch · workbench
99199bdb0251a207f87d8a1948dfaa91cd04d7f62826f35ee0bfb3667ca4indicatorpivotsearch · workbench
70df2e7cd045758efffee7eea44557edfb9abc751b183f155a45e4672b48indicatorpivotsearch · workbench
edfb11930ae84f31b3040c3e8cb79355indicatorpivotsearch · workbench
ec982480cef70b5cfe481745c534d89562a1c27ddd23fff32448d37fd64aindicatorpivotsearch · workbench
058540de9f0908a0d254332da67a4544884795588dac009f9ed14c9fa76dindicatorpivotsearch · workbench
e9f8b242231baf0873071ff8b8b452dde2ba5202353ca5889a166da53ea9indicatorpivotsearch · workbench
CE9E56AF0D46C6178787CFC2A63B8C2BC74B8A48803157CCCE06B57E6049indicatorpivotsearch · workbench
8C7099114704459FC8E73B43BD67CF18E5CC7A91B6D47478A4B29D8937FDindicatorpivotsearch · workbench
82746f7aa0a569538ee924c29c3fa16cindicatorpivotsearch · workbench
02a6412539659cc0b9da432edc3bd982652f1e4adc2b0be7473b691c057findicatorpivotsearch · workbench
8adab6dffb524684b60a3fa9353ff970indicatorpivotsearch · workbench
73974b430a9641a9809ac76d34139c250972b486a0ebf50eb0e3af681b0cindicatorpivotsearch · workbench
9a965cef211a0b96adfb96ce94e0a6a28b9f0c30e55af413f3d44c976ee2indicatorpivotsearch · workbench
1aa12431a521fc556f03b9e1c6a092cbe39f95c9c873a803751357150a41indicatorpivotsearch · workbench
75aeace5a0602c78047f26884f71209beb4336fc3a2cb18f8d140afd605eindicatorpivotsearch · workbench
28aad89b06771774903176a98b02b2b6260a6ce04be3ffacb4d764d624beindicatorpivotsearch · workbench
387647957efaa16119bafd0976ec8d58f99c3e680507a124223fda8943e4indicatorpivotsearch · workbench
307d9f5e4b85d1209753a90220cb3cf6e590288af57d81fb6a282c5d1a6dindicatorpivotsearch · workbench
82023f56067ff6667f0884a987ce2d81indicatorpivotsearch · workbench
8b6232573cfe7a219e76a9da45db5024indicatorpivotsearch · workbench
861140669bc8760954c8c6bd9b99eda5b634eaa2367afc1818cda5e518d4indicatorpivotsearch · workbench
f80aa4883892649f632a43fbe9b66c44indicatorpivotsearch · workbench
576ee91a05b194fe37103d0a42899664267bd90cindicatorpivotsearch · workbench
99fd9e75e6241eff30e01c5b59df9e901fb24d12bee89c069cc6158f78b3indicatorpivotsearch · workbench
ce2651066549871e98518e9c149dc2d0cc7108bd6300b6d9005a88ac98f5indicatorpivotsearch · workbench
8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f514indicatorpivotsearch · workbench
8476b541a9d47e28ed1bfcbb0ad4b6a8indicatorpivotsearch · workbench
72ef49e64a72d984cb253bc7c297ccd7indicatorpivotsearch · workbench

🦠 Malware (1)

Cryptocurrency

🤖 Case Operations

AI Copilot brief AI Skills Skills Library Playbooks Playbook Library Workstations Automations Correlation graph Data Points Sources Export STIX/MISP Evidence report Watchlist Report

📜 Chain of Evidence (tamper-evident, hash-chained)

WhenActorActionEntitySourceHash
2026-08-22 01:57:18analystexpandmalware: Cryptocurrencygraph+live · 47 linked entities pulle3718429ad0
2026-08-22 01:57:15analystaddmalware: Cryptocurrencymanual · primaryba788119c1
2026-08-22 01:57:15analystopenmalware: Cryptocurrencyanalyst · case created8e5f5b90e1

Each record's hash chains to the previous, so any tampering is detectable. Export the full trail via the Evidence report.

📝 Case Notes (0)

← All Cases
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Escalate from triage

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Legal & LEPlaybooksReports