General
- Target 2026-08-12_068547c0a3ad3c1af2b14ebb43d13d78_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 15.4MB
- Sample260812-je915sbc46
- SHA256 3674cbadc3c2f9e4fa7f823a58c0e88548904eaf62fdbcf6a228c6731a16f2f4
- MD5 068547c0a3ad3c1af2b14ebb43d13d78
- SHA1 5437f08acb83a49139043d80e424701d41f2c772
- SHA512 d0a8cf256113535143804af5c714007e0c45d9aadaae273c213b09a72a04919c9012dd88e7153efe56deb0ebe9b9c04c59c69805f0b07908d5ac801a711db8b3
- SSDEEP 196608:YKfB8BMCETYJhXDu+QW91O2tSGaRL4WuncRocjBI:tf6BMNErXsWvvSRfLRnlI
- TLSH T14EF67C43F89550E8CAEDD170CA758212BB707C884F207BD72B64F6792A73BD46A7A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-12_068547c0a3ad3c1af2b14ebb43d13d78_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_gla.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_068547c0a3ad3c1af2b14ebb43d13d78_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_gla.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_068547c0a3ad3c1af2b14ebb43d13d78_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 15.4MB
- SHA256 3674cbadc3c2f9e4fa7f823a58c0e88548904eaf62fdbcf6a228c6731a16f2f4
- MD5 068547c0a3ad3c1af2b14ebb43d13d78
- SHA1 5437f08acb83a49139043d80e424701d41f2c772
- SHA512 d0a8cf256113535143804af5c714007e0c45d9aadaae273c213b09a72a04919c9012dd88e7153efe56deb0ebe9b9c04c59c69805f0b07908d5ac801a711db8b3
- SSDEEP 196608:YKfB8BMCETYJhXDu+QW91O2tSGaRL4WuncRocjBI:tf6BMNErXsWvvSRfLRnlI
- TLSH T14EF67C43F89550E8CAEDD170CA758212BB707C884F207BD72B64F6792A73BD46A7A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.