General
- Target 2026-07-07_f1b69509b91fee4f3adfb7a4ae7cd2dd_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 2.0MB
- Sample260707-2bv2xse16w
- SHA256 be089f13ffca418c6f421ed84fe0195ed22a49e1bb59076ae9c5410231ecff7d
- MD5 f1b69509b91fee4f3adfb7a4ae7cd2dd
- SHA1 0a1984dc699c764f017a4febe311bada2c6c6b0d
- SHA512 6372261f886f800cb15c9c172ed4cef7b2f1f9a4b7e4ec13e50314a37b1d48e419caf4203597119e5f661c76da0a93cf06410704a4477d3cde568d8bbfbafe9a
- SSDEEP 49152:cZ+9/AplIFp/brb/T7vO90d7HjmAFd4A64nsfJU05rlisgCMbgzR44ovrfnz1:5FdV
- TLSH T124A5284BB89541B4C0AEE23589A59252BB307C980F3163D73F50B7B82F72BE85E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_f1b69509b91fee4f3adfb7a4ae7cd2dd_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_f1b69509b91fee4f3adfb7a4ae7cd2dd_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_f1b69509b91fee4f3adfb7a4ae7cd2dd_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 2.0MB
- SHA256 be089f13ffca418c6f421ed84fe0195ed22a49e1bb59076ae9c5410231ecff7d
- MD5 f1b69509b91fee4f3adfb7a4ae7cd2dd
- SHA1 0a1984dc699c764f017a4febe311bada2c6c6b0d
- SHA512 6372261f886f800cb15c9c172ed4cef7b2f1f9a4b7e4ec13e50314a37b1d48e419caf4203597119e5f661c76da0a93cf06410704a4477d3cde568d8bbfbafe9a
- SSDEEP 49152:cZ+9/AplIFp/brb/T7vO90d7HjmAFd4A64nsfJU05rlisgCMbgzR44ovrfnz1:5FdV
- TLSH T124A5284BB89541B4C0AEE23589A59252BB307C980F3163D73F50B7B82F72BE85E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.