General
- Target 2026-09-23_435868b7a757c8c8b2f843086f74e573_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample260924-ly5xmsag92
- SHA256 6c4bdfb00051bc1ed08e3bf1f35d5d05955c679ff05700cfc8879f006e23e9ef
- MD5 435868b7a757c8c8b2f843086f74e573
- SHA1 8b5d7889ff37fe4e800352c4ed4f4adba88616d0
- SHA512 78aad00a4ca93085817ea8899c7d8fb7c7beb119b1fc6f1c806381b0484e620a26de7b2830d83cb9e22a42c204cfdb2679ecc4c7870f758e6fc71be08deddead
- SSDEEP 49152:1wHdjzfdlG1UYXvrb/T8vO90d7HjmAFd4A64nsfJFhVfkrRLxw5Vr9VXyieNHwrD:2dlG1UYHrp/VplrmYvEq+e3
- TLSH T1D5364B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-23_435868b7a757c8c8b2f843086f74e573_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_435868b7a757c8c8b2f843086f74e573_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_435868b7a757c8c8b2f843086f74e573_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 6c4bdfb00051bc1ed08e3bf1f35d5d05955c679ff05700cfc8879f006e23e9ef
- MD5 435868b7a757c8c8b2f843086f74e573
- SHA1 8b5d7889ff37fe4e800352c4ed4f4adba88616d0
- SHA512 78aad00a4ca93085817ea8899c7d8fb7c7beb119b1fc6f1c806381b0484e620a26de7b2830d83cb9e22a42c204cfdb2679ecc4c7870f758e6fc71be08deddead
- SSDEEP 49152:1wHdjzfdlG1UYXvrb/T8vO90d7HjmAFd4A64nsfJFhVfkrRLxw5Vr9VXyieNHwrD:2dlG1UYHrp/VplrmYvEq+e3
- TLSH T1D5364B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2