General
- Target 2026-05-05_b9fe1bd8e940498d3af24d1f0cf750de_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample260505-ntek1aev2w
- SHA256 90e065e4e89aec71716df163bb7e8ed857e3fc8b100036002b7edadf5158a663
- MD5 b9fe1bd8e940498d3af24d1f0cf750de
- SHA1 447dfe80cf96d213fdbe1ab10685f088dde03b4a
- SHA512 fd995e71ffb481733f06ce43defbecd7952f6049672b8ca1ff4c8b6d03a794d0f51f84be552c4c285e61fb1ca0c6fe0f845272fceb564eca92156a7470c8b4c3
- SSDEEP 49152:xRg0nHQi1ruVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkr5j3VV5Cj:qi1ruVwwGf5frj37GEG+ebj
- TLSH T182363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_b9fe1bd8e940498d3af24d1f0cf750de_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_b9fe1bd8e940498d3af24d1f0cf750de_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_b9fe1bd8e940498d3af24d1f0cf750de_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 90e065e4e89aec71716df163bb7e8ed857e3fc8b100036002b7edadf5158a663
- MD5 b9fe1bd8e940498d3af24d1f0cf750de
- SHA1 447dfe80cf96d213fdbe1ab10685f088dde03b4a
- SHA512 fd995e71ffb481733f06ce43defbecd7952f6049672b8ca1ff4c8b6d03a794d0f51f84be552c4c285e61fb1ca0c6fe0f845272fceb564eca92156a7470c8b4c3
- SSDEEP 49152:xRg0nHQi1ruVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkr5j3VV5Cj:qi1ruVwwGf5frj37GEG+ebj
- TLSH T182363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.