General
- Target 2026-10-22_10337639548265e03bcfa168cdb36298_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample261024-1fs8fs119r
- SHA256 60cc3c0e40d84e7e6d502f7153824f0dfebc2abc9a29b554c750d5d1167b09fd
- MD5 10337639548265e03bcfa168cdb36298
- SHA1 f236947c7e7431b50cf6d44d7d0f0d86da456478
- SHA512 a83640176f5ff9a739c3a43b96d352fbdad377b8edc5c04fdde470162b287c6f0568d15c070ae2939fbea24c28f14876f7139b9921e76efb6744ff6d743353f7
- SSDEEP 49152:ARg0nHoi1juVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkrhj3V15CG:bi1juVwwGf5fzj3zGEy+eA1
- TLSH T1FC363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_10337639548265e03bcfa168cdb36298_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_10337639548265e03bcfa168cdb36298_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_10337639548265e03bcfa168cdb36298_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 60cc3c0e40d84e7e6d502f7153824f0dfebc2abc9a29b554c750d5d1167b09fd
- MD5 10337639548265e03bcfa168cdb36298
- SHA1 f236947c7e7431b50cf6d44d7d0f0d86da456478
- SHA512 a83640176f5ff9a739c3a43b96d352fbdad377b8edc5c04fdde470162b287c6f0568d15c070ae2939fbea24c28f14876f7139b9921e76efb6744ff6d743353f7
- SSDEEP 49152:ARg0nHoi1juVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkrhj3V15CG:bi1juVwwGf5fzj3zGEy+eA1
- TLSH T1FC363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.