General
- Target 2026-10-22_94433ebcb8d2a2423ae82d877a5aa5c2_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- Sample261024-ex85caw13q
- SHA256 53fcc1561cdcdb9bb5423165475214fdc8c392064a3ecca8b6a9d3007b320759
- MD5 94433ebcb8d2a2423ae82d877a5aa5c2
- SHA1 b3210a6883928eaee9366cc0c9df21c39f3bff06
- SHA512 06f24ec431408d8f5e4f6ee23b433c8ccfdeba787983cfa0e83962e4783050e2833e12ecb9e4507d90f00fc1989dc2adaa3864b825ad543a042791c4c53b086f
- SSDEEP 49152:5Rg0nHoi1juVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkrhj3V15C8:Ci1juVwwGf5fzj3zGE++euJ
- TLSH T139363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_94433ebcb8d2a2423ae82d877a5aa5c2_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_94433ebcb8d2a2423ae82d877a5aa5c2_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_94433ebcb8d2a2423ae82d877a5aa5c2_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 5.0MB
- SHA256 53fcc1561cdcdb9bb5423165475214fdc8c392064a3ecca8b6a9d3007b320759
- MD5 94433ebcb8d2a2423ae82d877a5aa5c2
- SHA1 b3210a6883928eaee9366cc0c9df21c39f3bff06
- SHA512 06f24ec431408d8f5e4f6ee23b433c8ccfdeba787983cfa0e83962e4783050e2833e12ecb9e4507d90f00fc1989dc2adaa3864b825ad543a042791c4c53b086f
- SSDEEP 49152:5Rg0nHoi1juVvrb/T8vO90d7HjmAFd4A64nsfJmp6dEcZ4Vx9n5vnYkrhj3V15C8:Ci1juVwwGf5fzj3zGE++euJ
- TLSH T139363B47F85551E8C1AED234CA259263BA707C891B3033D36BA0F7B82B73BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.