General
- Target 2026-10-10_4097b99a5c98a5f7a47f06904f2af8f4_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_kaiji_poet-rat_salatstealer_sliver_snatch
- Size 5.1MB
- Sample261011-tlbf9sxt7k
- SHA256 f68bb733ccf311bd72c18205d04c113ddafbf9c8cc308f9fe831ca413efea03b
- MD5 4097b99a5c98a5f7a47f06904f2af8f4
- SHA1 42c0c1b2fd8bd236a1980c0c8ea18071919595d0
- SHA512 c0ecd0346f7ce7a506e3d174ff0877c09f69898ed03b3b49b49b61176e72f986278abf61739cddd4583076632b1fa14b9f2c795291558d621103c319fd4a745c
- SSDEEP 49152:Mg3kXf3pgz/SsMcO1fZkKLy1zpslsqzzqqALm9axp6XgcBr+wp7CJ4KGuT+X1q7e:Mg3kXPyeLcQzzqqALm9Hl5I
- TLSH T1B7462851FDDB50FAEA03193004A7A2BF57306D098B39CBC7DA107F6AE8776910E36619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-10_4097b99a5c98a5f7a47f06904f2af8f4_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_k.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_4097b99a5c98a5f7a47f06904f2af8f4_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_k.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_4097b99a5c98a5f7a47f06904f2af8f4_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_kaiji_poet-rat_salatstealer_sliver_snatch
- Size 5.1MB
- SHA256 f68bb733ccf311bd72c18205d04c113ddafbf9c8cc308f9fe831ca413efea03b
- MD5 4097b99a5c98a5f7a47f06904f2af8f4
- SHA1 42c0c1b2fd8bd236a1980c0c8ea18071919595d0
- SHA512 c0ecd0346f7ce7a506e3d174ff0877c09f69898ed03b3b49b49b61176e72f986278abf61739cddd4583076632b1fa14b9f2c795291558d621103c319fd4a745c
- SSDEEP 49152:Mg3kXf3pgz/SsMcO1fZkKLy1zpslsqzzqqALm9axp6XgcBr+wp7CJ4KGuT+X1q7e:Mg3kXPyeLcQzzqqALm9Hl5I
- TLSH T1B7462851FDDB50FAEA03193004A7A2BF57306D098B39CBC7DA107F6AE8776910E36619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Adds Run key to start application