General
- Target 2026-09-25_aafb57eb5a51e29b35069fe95170d9ee_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver_snatch
- Size 3.2MB
- Sample260925-1blmtaxcka
- SHA256 ea65dd129a6af3d6175241be134360b4be3756f642441f4b6fdec28a32421c0b
- MD5 aafb57eb5a51e29b35069fe95170d9ee
- SHA1 f744583a067d9144c983003ac03532758df2930c
- SHA512 b9b5d3a06cb7c65a7c984d9fcb496d5072713c9d94d06b2f9722c1e6b13c8ec1ece5c4602f8a9286f6c788ffe7f52c665c714d50877a5ec733af671f44a37d72
- SSDEEP 49152:G9d4AIo8CpRjyrb/THvO90d7HjmAFd4A64nsfJJYHCrxxfcF/EKNtG+Q5JHbiJ1S:ypo+uiXhgQ
- TLSH T16CF54A47BC9140A8C5AEE230C96A9252BB717C890B3167D33B90F7B82F72BD45E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_aafb57eb5a51e29b35069fe95170d9ee_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_aafb57eb5a51e29b35069fe95170d9ee_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-s.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_aafb57eb5a51e29b35069fe95170d9ee_cobalt-strike_coinminer_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver_snatch
- Size 3.2MB
- SHA256 ea65dd129a6af3d6175241be134360b4be3756f642441f4b6fdec28a32421c0b
- MD5 aafb57eb5a51e29b35069fe95170d9ee
- SHA1 f744583a067d9144c983003ac03532758df2930c
- SHA512 b9b5d3a06cb7c65a7c984d9fcb496d5072713c9d94d06b2f9722c1e6b13c8ec1ece5c4602f8a9286f6c788ffe7f52c665c714d50877a5ec733af671f44a37d72
- SSDEEP 49152:G9d4AIo8CpRjyrb/THvO90d7HjmAFd4A64nsfJJYHCrxxfcF/EKNtG+Q5JHbiJ1S:ypo+uiXhgQ
- TLSH T16CF54A47BC9140A8C5AEE230C96A9252BB717C890B3167D33B90F7B82F72BD45E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.