General
- Target 2026-06-29_f390e766bc6cbae04bc31d4f5fd3480c_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 10.0MB
- Sample260630-bscc2acx2j
- SHA256 3efdb8c29cdc95c663e68365447d15d8d73f05e8e6be105f07e2f910a0f95586
- MD5 f390e766bc6cbae04bc31d4f5fd3480c
- SHA1 05cd9de31df29289d102a5f23a46939ea992e950
- SHA512 b83dbae7184e9143216dbe9625680a9390e0240a55e60ffd45a6586beea9fe3404cfd31fce8735e2ac5fea34793f129d31c27049965d118ebd3ee92b09eb7ee3
- SSDEEP 98304:QmPUf5A91QP5oToUsbeRwcyHekFeSpc12EKw+KVktWHBLmpTN5huJd3kMerGpNTr:zqqQP5oKswpLi3gOWW
- TLSH T156B65C47E99241E8C4AAD1308667A273BA317C151B2467E72B90F7382F77FD05EBA710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_f390e766bc6cbae04bc31d4f5fd3480c_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_f390e766bc6cbae04bc31d4f5fd3480c_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_f390e766bc6cbae04bc31d4f5fd3480c_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 10.0MB
- SHA256 3efdb8c29cdc95c663e68365447d15d8d73f05e8e6be105f07e2f910a0f95586
- MD5 f390e766bc6cbae04bc31d4f5fd3480c
- SHA1 05cd9de31df29289d102a5f23a46939ea992e950
- SHA512 b83dbae7184e9143216dbe9625680a9390e0240a55e60ffd45a6586beea9fe3404cfd31fce8735e2ac5fea34793f129d31c27049965d118ebd3ee92b09eb7ee3
- SSDEEP 98304:QmPUf5A91QP5oToUsbeRwcyHekFeSpc12EKw+KVktWHBLmpTN5huJd3kMerGpNTr:zqqQP5oKswpLi3gOWW
- TLSH T156B65C47E99241E8C4AAD1308667A273BA317C151B2467E72B90F7382F77FD05EBA710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory