General
- Target 2026-08-21_a9b4ac0fd1bdbce8a36b3eed9ba539d6_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.0MB
- Sample260822-kcpsvsfp8v
- SHA256 0061956af892862777e79e7346110e78d30cae30be0099fd571acebf6f5144eb
- MD5 a9b4ac0fd1bdbce8a36b3eed9ba539d6
- SHA1 806398d014de860c4ed32cf0d57e8a9a780f6395
- SHA512 d84744c0a682ea88bcf29dbce92afb001834e53eae38bc2b6330711b99960790547af90880d8f140fec4865184a281ffdfddcfc0dd302a854efbf7b49ba5a8e0
- SSDEEP 49152:5Sw9hpPZx24jwoUfrb/TQvO90d7HjmAFd4A64nsfJmKcdzpwiqHL65xBSsWKhuhE:hrQ2xoAg1/btedxMX18E3hz2ztyMhn
- TLSH T11AB64A43F89184A8C1ADD170C626C6A3BA707C885F3067D72B50FBB92B37BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_a9b4ac0fd1bdbce8a36b3eed9ba539d6_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_a9b4ac0fd1bdbce8a36b3eed9ba539d6_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_a9b4ac0fd1bdbce8a36b3eed9ba539d6_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 10.0MB
- SHA256 0061956af892862777e79e7346110e78d30cae30be0099fd571acebf6f5144eb
- MD5 a9b4ac0fd1bdbce8a36b3eed9ba539d6
- SHA1 806398d014de860c4ed32cf0d57e8a9a780f6395
- SHA512 d84744c0a682ea88bcf29dbce92afb001834e53eae38bc2b6330711b99960790547af90880d8f140fec4865184a281ffdfddcfc0dd302a854efbf7b49ba5a8e0
- SSDEEP 49152:5Sw9hpPZx24jwoUfrb/TQvO90d7HjmAFd4A64nsfJmKcdzpwiqHL65xBSsWKhuhE:hrQ2xoAg1/btedxMX18E3hz2ztyMhn
- TLSH T11AB64A43F89184A8C1ADD170C626C6A3BA707C885F3067D72B50FBB92B37BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.