General
- Target 2025-11-24_3093eda07b83e509bd2544be5630afdd_cobalt-strike_coinminer_elex_frostygoop_gcleaner_glassworm_poet-rat_sliver_snatch
- Size 10.8MB
- Sample251124-b95e5s1qbp
- SHA256 f1858edbb444a1bf0dab2b79d4f007483ac4749ca7d7454431c0ea6f7556a1d2
- MD5 3093eda07b83e509bd2544be5630afdd
- SHA1 bd22a6ddab59c1c44a9bf4825c58cb91b4c7791a
- SHA512 6517081aa85cc82b13d368b735a117b036cf20477252de36720959f0cc77b428d54c9c93bbdfdf4e00c0122783f0daf5db9069dd520dea3a43fc7eb6bd80945c
- SSDEEP 98304:kodnKk4Kvc+ojZUdA0vXKeNPIrl8SnOJZ9MlHcmQCLxMMux:VdnKAXpCRVlHa2xMMux
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2025-11-24_3093eda07b83e509bd2544be5630afdd_cobalt-strike_coinminer_elex_frostygoop_gcleaner_glasswo.exe
Resource
win10v2004-20251016-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-11-24_3093eda07b83e509bd2544be5630afdd_cobalt-strike_coinminer_elex_frostygoop_gcleaner_glasswo.exe
Resource
win11-20251015-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
httpbot
C2
-
jjj.jjycc.cc:55888
Targets
-
- Target 2025-11-24_3093eda07b83e509bd2544be5630afdd_cobalt-strike_coinminer_elex_frostygoop_gcleaner_glassworm_poet-rat_sliver_snatch
- Size 10.8MB
- SHA256 f1858edbb444a1bf0dab2b79d4f007483ac4749ca7d7454431c0ea6f7556a1d2
- MD5 3093eda07b83e509bd2544be5630afdd
- SHA1 bd22a6ddab59c1c44a9bf4825c58cb91b4c7791a
- SHA512 6517081aa85cc82b13d368b735a117b036cf20477252de36720959f0cc77b428d54c9c93bbdfdf4e00c0122783f0daf5db9069dd520dea3a43fc7eb6bd80945c
- SSDEEP 98304:kodnKk4Kvc+ojZUdA0vXKeNPIrl8SnOJZ9MlHcmQCLxMMux:VdnKAXpCRVlHa2xMMux
- MD5 SHA1 SHA512 SSDEEP
Score3/10