General

  • Target
    2025-07-11_21269c60b9b300b73009abae806df20b_cobalt-strike_dosia_ghostlocker_luca-stealer_poet-rat_quasar-rat
  • Size 22.2MB
  • Sample250711-qs3yback3w
  • SHA256 c6d9e76d76c3e4de6d1c0e028718731431cb975dc964df9c8cd097a24b813648
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Dynam1c family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2025-07-11_21269c60b9b300b73009abae806df20b_cobalt-strike_dosia_ghostlocker_luca-stealer_poet-rat_quasar-rat
    .exe 22.2MB

2025-07-11_21269c60b9b300b73009abae806df20b_cobalt-strike_dosia_ghostlocker_luca-stealer_poet-rat_quasar-rat

  • IMPHASH fc876502d395d010483741df4a4159f4
  • SHA256 c6d9e76d76c3e4de6d1c0e028718731431cb975dc964df9c8cd097a24b813648
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
6
Entry point
5328
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths