General
- Target 2026-10-20_f3e2530d05a136637f99f8341548b75c_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample261021-pahc8aey5k
- SHA256 19766628f6af78f7bf91c736a62fb86978cb0efa46d25435a623bcd2142610a3
- MD5 f3e2530d05a136637f99f8341548b75c
- SHA1 32c84fca9c7af1e88ee128d5bf05acab23cb0dfa
- SHA512 e1e8bf321d7c5f4cdc153e8c0200c3d9d479312a09402fbf7b33cf4359da4f9a4c53b36e9f5e06fd8fcca6a6e045c608e9f1d9a2b25c6c68bbc5bbde140eb93f
- SSDEEP 49152:sc7DMTgZbluOrprb/TcvO90d7HjmAFd4A64nsfJ7g2DWtZQJBSoD51ow/pyNFrX7:njZbluOrfrVbDfotNFb1E/+elM
- TLSH T1C8363B47F85551E8C1AED234CA259263BA707C891B3023D36BA0F7B82B73BD46E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-20_f3e2530d05a136637f99f8341548b75c_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-20_f3e2530d05a136637f99f8341548b75c_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-20_f3e2530d05a136637f99f8341548b75c_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 19766628f6af78f7bf91c736a62fb86978cb0efa46d25435a623bcd2142610a3
- MD5 f3e2530d05a136637f99f8341548b75c
- SHA1 32c84fca9c7af1e88ee128d5bf05acab23cb0dfa
- SHA512 e1e8bf321d7c5f4cdc153e8c0200c3d9d479312a09402fbf7b33cf4359da4f9a4c53b36e9f5e06fd8fcca6a6e045c608e9f1d9a2b25c6c68bbc5bbde140eb93f
- SSDEEP 49152:sc7DMTgZbluOrprb/TcvO90d7HjmAFd4A64nsfJ7g2DWtZQJBSoD51ow/pyNFrX7:njZbluOrfrVbDfotNFb1E/+elM
- TLSH T1C8363B47F85551E8C1AED234CA259263BA707C891B3023D36BA0F7B82B73BD46E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.