General
- Target 2026-07-20_3d723a12486e20d012e001034c697ab0_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample260720-jphdwaaw7p
- SHA256 5a2daa161c613de38c7119df51026b31e473cea3a6662a5940e3a994a0d2aebc
- MD5 3d723a12486e20d012e001034c697ab0
- SHA1 7504165aa7b1806781bee48a4a889458736e903d
- SHA512 a92e3d8d35b58f5c06acf2b2f7a1462c402c262b106871c4a982e3a69310aeb4cbf4dc5709313c7146e6a37f08a61d001f066e4d04b89878bd7f927a8bcf93bf
- SSDEEP 49152:aA/ljznTzE1IxDcrb/T8vO90d7HjmAFd4A64nsfJg5iz81LMyGBK1wVVE3+Yezz:NTzE1IxJu48Vi2zVSzEo+eZ
- TLSH T19C363B47F85551E8C1AED234CA259263BA707C891B3023D36BA0F7B82B73BD46E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3d723a12486e20d012e001034c697ab0_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3d723a12486e20d012e001034c697ab0_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3d723a12486e20d012e001034c697ab0_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 5a2daa161c613de38c7119df51026b31e473cea3a6662a5940e3a994a0d2aebc
- MD5 3d723a12486e20d012e001034c697ab0
- SHA1 7504165aa7b1806781bee48a4a889458736e903d
- SHA512 a92e3d8d35b58f5c06acf2b2f7a1462c402c262b106871c4a982e3a69310aeb4cbf4dc5709313c7146e6a37f08a61d001f066e4d04b89878bd7f927a8bcf93bf
- SSDEEP 49152:aA/ljznTzE1IxDcrb/T8vO90d7HjmAFd4A64nsfJg5iz81LMyGBK1wVVE3+Yezz:NTzE1IxJu48Vi2zVSzEo+eZ
- TLSH T19C363B47F85551E8C1AED234CA259263BA707C891B3023D36BA0F7B82B73BD46E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2