General
- Target 2026-09-30_6c0836a45f9fbd1c6873bf0f9a1b7dfe_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample261001-pydpyaythv
- SHA256 77322c0efc7fa8ea3c81a796927cd7d766e453fefd4704681a843e1f39f89638
- MD5 6c0836a45f9fbd1c6873bf0f9a1b7dfe
- SHA1 e4d41b1f2d08fa281fa6a9ea76840b7c740890f5
- SHA512 1e8f84e50a5b2c1c4869f075c93159e765e114d0f6e18d684cd0deb660278dc2ed2494ac1003ad6bc34b5754eb2b20d6d0138c79115f4d5b8d1ea6317f883786
- SSDEEP 49152:uwHdjzfdlG1UYXvrb/T8vO90d7HjmAFd4A64nsfJFhVfkrRLxw5Vr9VXyieNHwrT:9dlG1UYHrp/VplrmYvE6+eX
- TLSH T139364B47F85551E8C1AED234CA658263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_6c0836a45f9fbd1c6873bf0f9a1b7dfe_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_6c0836a45f9fbd1c6873bf0f9a1b7dfe_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_6c0836a45f9fbd1c6873bf0f9a1b7dfe_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 77322c0efc7fa8ea3c81a796927cd7d766e453fefd4704681a843e1f39f89638
- MD5 6c0836a45f9fbd1c6873bf0f9a1b7dfe
- SHA1 e4d41b1f2d08fa281fa6a9ea76840b7c740890f5
- SHA512 1e8f84e50a5b2c1c4869f075c93159e765e114d0f6e18d684cd0deb660278dc2ed2494ac1003ad6bc34b5754eb2b20d6d0138c79115f4d5b8d1ea6317f883786
- SSDEEP 49152:uwHdjzfdlG1UYXvrb/T8vO90d7HjmAFd4A64nsfJFhVfkrRLxw5Vr9VXyieNHwrT:9dlG1UYHrp/VplrmYvE6+eX
- TLSH T139364B47F85551E8C1AED234CA658263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2