General
- Target 2026-06-27_b60572f29c05f5ac801f6081ab8cf844_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 4.7MB
- Sample260629-d7bfdsdv7q
- SHA256 9ab8f66539b14ee86836159c27ac52aba1b59be8fbb8a3c59c79cc38a1c5b24b
- MD5 b60572f29c05f5ac801f6081ab8cf844
- SHA1 bf779c5e670c421d6883badd7f09743c63851d6b
- SHA512 923ec697c629992262b4d999c55179e2937bda201432cc9a43730ce5c933a79fa210f4386539335b72ab69555ca9bab16e74e642959e726a39cd8d0449b4aada
- SSDEEP 49152:h+2+Y39WMhrb/TkvO90dL3BmAFd4A64nsfJN1JqspWcKehnjiOB4raSFHA5Ef7nh:j3rrX2g+0Efimxt
- TLSH T12E363C43F85191A5C1AED130C565D2A2BA717C845B3023D33BA0FBBA3B76BD4AE79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b60572f29c05f5ac801f6081ab8cf844_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b60572f29c05f5ac801f6081ab8cf844_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 4.7MB
- SHA256 9ab8f66539b14ee86836159c27ac52aba1b59be8fbb8a3c59c79cc38a1c5b24b
- MD5 b60572f29c05f5ac801f6081ab8cf844
- SHA1 bf779c5e670c421d6883badd7f09743c63851d6b
- SHA512 923ec697c629992262b4d999c55179e2937bda201432cc9a43730ce5c933a79fa210f4386539335b72ab69555ca9bab16e74e642959e726a39cd8d0449b4aada
- SSDEEP 49152:h+2+Y39WMhrb/TkvO90dL3BmAFd4A64nsfJN1JqspWcKehnjiOB4raSFHA5Ef7nh:j3rrX2g+0Efimxt
- TLSH T12E363C43F85191A5C1AED130C565D2A2BA717C845B3023D33BA0FBBA3B76BD4AE79314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Stops running service(s)
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Impair Defenses
1Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2