General
- Target 2026-10-22_9dd3cf6e3ba2f33f2b8adfc7b55647c0_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample261024-de2f4sht6j
- SHA256 0bef25f7d512c540689b0015048ff47595718a560cdbe066a58dfa81a5e36883
- MD5 9dd3cf6e3ba2f33f2b8adfc7b55647c0
- SHA1 b8f31383003be5102b30d288ce6d609d8ef71c79
- SHA512 683475e81891fd59ec40979dd4774c17aa47914af3f464321e7bd127d476cf890390488ffeea35ef1f2d222b73f2f18268234a8a5e60361955d796651533ffbc
- SSDEEP 49152:ARg0nHoi1juVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkrhj3V15CB:bi1juVwwGf5fzj3zGEy+eAK
- TLSH T1CC363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_9dd3cf6e3ba2f33f2b8adfc7b55647c0_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_9dd3cf6e3ba2f33f2b8adfc7b55647c0_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_9dd3cf6e3ba2f33f2b8adfc7b55647c0_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 0bef25f7d512c540689b0015048ff47595718a560cdbe066a58dfa81a5e36883
- MD5 9dd3cf6e3ba2f33f2b8adfc7b55647c0
- SHA1 b8f31383003be5102b30d288ce6d609d8ef71c79
- SHA512 683475e81891fd59ec40979dd4774c17aa47914af3f464321e7bd127d476cf890390488ffeea35ef1f2d222b73f2f18268234a8a5e60361955d796651533ffbc
- SSDEEP 49152:ARg0nHoi1juVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkrhj3V15CB:bi1juVwwGf5fzj3zGEy+eAK
- TLSH T1CC363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.