General
- Target 2026-10-22_f6dc365bad6e34d7e0fef5a894874eff_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample261023-b4anksca78
- SHA256 7821ea72a5cce3080b292efe9da9e18d4b548ae8b7a0c6ae4c0206bd77aef70c
- MD5 f6dc365bad6e34d7e0fef5a894874eff
- SHA1 7733e6877746277b9c34bf2eceac422488810af2
- SHA512 744b62fb8f8a1dc218787f4a5bbdd9074a96ae0451bc32c38a25657147258ac78ec7c9a9c3680df3a4c5b9352effa6a5757461624e9b8b26476feb1374c8c04b
- SSDEEP 49152:SRg0nHoi1juVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkrhj3V15Cb:9i1juVwwGf5fzj3zGE++eu+
- TLSH T1E5363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_f6dc365bad6e34d7e0fef5a894874eff_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_f6dc365bad6e34d7e0fef5a894874eff_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_f6dc365bad6e34d7e0fef5a894874eff_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 7821ea72a5cce3080b292efe9da9e18d4b548ae8b7a0c6ae4c0206bd77aef70c
- MD5 f6dc365bad6e34d7e0fef5a894874eff
- SHA1 7733e6877746277b9c34bf2eceac422488810af2
- SHA512 744b62fb8f8a1dc218787f4a5bbdd9074a96ae0451bc32c38a25657147258ac78ec7c9a9c3680df3a4c5b9352effa6a5757461624e9b8b26476feb1374c8c04b
- SSDEEP 49152:SRg0nHoi1juVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkrhj3V15Cb:9i1juVwwGf5fzj3zGE++eu+
- TLSH T1E5363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.