General
- Target 2026-09-10_5556454059c17c4c6257e2be3638d9c7_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_icedid_luca-stealer_njrat_poet-rat_quasar-rat_salatstealer_satacom_sliver_snatch_vidar_zxxz
- Size 35.0MB
- Sample260910-t9ll5svwct
- SHA256 aadb876c106b1613a39a25237eb8450e544715375c9e911939f865a3de2aa686
- MD5 5556454059c17c4c6257e2be3638d9c7
- SHA1 b3b954e444040a7b6364e4d70d0408fff105e87c
- SHA512 dd5a5c25fb0f617ee28cdd4b5bb1b5c30ec77ffbca014e5d75a5089a4e8d9c0f27ee8b2a134813c962459194d6c6c11acea8e0bab0c941fbfad3097f86ab3bc3
- SSDEEP 786432:PxjFVRM/VvdiztSv1ju4Yq2wTmL69hfeaOsSk:pcBYztSv1ju4Yq2wTmLghfe4
- TLSH T16E877D43B95A49E8C49EC434C69643636A713C8A0B3177EB1A94F7383F76BE05BB9314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_5556454059c17c4c6257e2be3638d9c7_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_gla.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_5556454059c17c4c6257e2be3638d9c7_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_gla.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_5556454059c17c4c6257e2be3638d9c7_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_icedid_luca-stealer_njrat_poet-rat_quasar-rat_salatstealer_satacom_sliver_snatch_vidar_zxxz
- Size 35.0MB
- SHA256 aadb876c106b1613a39a25237eb8450e544715375c9e911939f865a3de2aa686
- MD5 5556454059c17c4c6257e2be3638d9c7
- SHA1 b3b954e444040a7b6364e4d70d0408fff105e87c
- SHA512 dd5a5c25fb0f617ee28cdd4b5bb1b5c30ec77ffbca014e5d75a5089a4e8d9c0f27ee8b2a134813c962459194d6c6c11acea8e0bab0c941fbfad3097f86ab3bc3
- SSDEEP 786432:PxjFVRM/VvdiztSv1ju4Yq2wTmL69hfeaOsSk:pcBYztSv1ju4Yq2wTmLghfe4
- TLSH T16E877D43B95A49E8C49EC434C69643636A713C8A0B3177EB1A94F7383F76BE05BB9314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled