General
- Target 2026-08-22_c1b7f3d8535d1e01d131bd1f08699ddb_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 14.5MB
- Sample260822-d43epsep2y
- SHA256 2ddf1853091f173db75636cc3e870b76437fe0fcef760b0f6f00f9b07bbbb8dc
- MD5 c1b7f3d8535d1e01d131bd1f08699ddb
- SHA1 6623260803b7e12391f489c5a0cceb5d49c4b854
- SHA512 90c4bd14a14c04687d028586a2ea36371c8396139c86b0258e9aa5e08408de4e67ab87557623d7c25276bcc01ddd2d335bdd71f5c997fbf3f61963ddb7eee422
- SSDEEP 98304:u/5ewOmU0xH3z1ZA/I8AizxD2SXA0Eje6TikMXxbcTuAxZ:u/5XF3z16aYANjkrXKTucZ
- TLSH T1DFE66B47F85181E4C1ADD234C6259263BB703C895B3033D72B61FBB92B72BD45ABA358
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-22_c1b7f3d8535d1e01d131bd1f08699ddb_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_c1b7f3d8535d1e01d131bd1f08699ddb_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_c1b7f3d8535d1e01d131bd1f08699ddb_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 14.5MB
- SHA256 2ddf1853091f173db75636cc3e870b76437fe0fcef760b0f6f00f9b07bbbb8dc
- MD5 c1b7f3d8535d1e01d131bd1f08699ddb
- SHA1 6623260803b7e12391f489c5a0cceb5d49c4b854
- SHA512 90c4bd14a14c04687d028586a2ea36371c8396139c86b0258e9aa5e08408de4e67ab87557623d7c25276bcc01ddd2d335bdd71f5c997fbf3f61963ddb7eee422
- SSDEEP 98304:u/5ewOmU0xH3z1ZA/I8AizxD2SXA0Eje6TikMXxbcTuAxZ:u/5XF3z16aYANjkrXKTucZ
- TLSH T1DFE66B47F85181E4C1ADD234C6259263BB703C895B3033D72B61FBB92B72BD45ABA358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.