General
- Target 2026-06-29_dd0ce6658da8449a9662af0d8ce702a0_cloudeye_cobalt-strike_coinminer_elex_frostygoop_glassworm_hijackloader_hive_salatstealer_sliver
- Size 5.1MB
- Sample260630-c32lcacy8x
- SHA256 31855de41fee2d7bfd3f335ca87fe611d426e81b266c60918b876cb210bd877e
- MD5 dd0ce6658da8449a9662af0d8ce702a0
- SHA1 04b02d6480ed3b47066a88bea4e98f1fa7267636
- SHA512 c79fb3ac01f80b86be2885fccdd3c477db273364dc9ef7acba43229034fb55a40f2c9e8fc9e41472ce61c1dbeccd8779781695be8882285a75c18e2905dbd452
- SSDEEP 98304:JtPYHxzY9RdvmRCAgTs7UHloh6K7jMy3e:LgGmUI7Uw6KXMy
- TLSH T11836AE91FCDB44B2E503263148A7626F27346E095F24CBC7DA407FAAEC776E10933629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-06-29_dd0ce6658da8449a9662af0d8ce702a0_cloudeye_cobalt-strike_coinminer_elex_frostygoop_glasswo.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_dd0ce6658da8449a9662af0d8ce702a0_cloudeye_cobalt-strike_coinminer_elex_frostygoop_glasswo.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_dd0ce6658da8449a9662af0d8ce702a0_cloudeye_cobalt-strike_coinminer_elex_frostygoop_glassworm_hijackloader_hive_salatstealer_sliver
- Size 5.1MB
- SHA256 31855de41fee2d7bfd3f335ca87fe611d426e81b266c60918b876cb210bd877e
- MD5 dd0ce6658da8449a9662af0d8ce702a0
- SHA1 04b02d6480ed3b47066a88bea4e98f1fa7267636
- SHA512 c79fb3ac01f80b86be2885fccdd3c477db273364dc9ef7acba43229034fb55a40f2c9e8fc9e41472ce61c1dbeccd8779781695be8882285a75c18e2905dbd452
- SSDEEP 98304:JtPYHxzY9RdvmRCAgTs7UHloh6K7jMy3e:LgGmUI7Uw6KXMy
- TLSH T11836AE91FCDB44B2E503263148A7626F27346E095F24CBC7DA407FAAEC776E10933629
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application