General
- Target 2026-07-06_f35d9cc6e91bf082ed47bc23a8141966_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample260706-x65sdsct4z
- SHA256 8f25476f323c6adb2d23fd8fd1fd2ea95011b6b4b27558498ef8c0dbbcbd4b0e
- MD5 f35d9cc6e91bf082ed47bc23a8141966
- SHA1 6cf8a3ad716a7dcc07ddff55238ae93fe0fff651
- SHA512 dae190b5ba12a3e6c093fb08733935be96f6cffd5a2fd2ddf144b3fc8028db2830be27537e7e61a92ef02b4bdbcc1d1dae24a7f8c286c106c6abaa76aab07efe
- SSDEEP 49152:dRg0nHQi1ruVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkr5j3VV5Cz:ui1ruVwwGf5frj37GEY+eWU
- TLSH T1F0363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_f35d9cc6e91bf082ed47bc23a8141966_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_f35d9cc6e91bf082ed47bc23a8141966_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260706-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_f35d9cc6e91bf082ed47bc23a8141966_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 8f25476f323c6adb2d23fd8fd1fd2ea95011b6b4b27558498ef8c0dbbcbd4b0e
- MD5 f35d9cc6e91bf082ed47bc23a8141966
- SHA1 6cf8a3ad716a7dcc07ddff55238ae93fe0fff651
- SHA512 dae190b5ba12a3e6c093fb08733935be96f6cffd5a2fd2ddf144b3fc8028db2830be27537e7e61a92ef02b4bdbcc1d1dae24a7f8c286c106c6abaa76aab07efe
- SSDEEP 49152:dRg0nHQi1ruVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkr5j3VV5Cz:ui1ruVwwGf5frj37GEY+eWU
- TLSH T1F0363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.