2026-07-06_76b423f22e64213aca595474c63114cf_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_76b423f22e64213aca595474c63114cf_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat
Size 10.5MB
Sample260707-dev94agv7s
SHA256 19fbcc7c3bb6dca094f07b55a2a79bd50f313951c108b4e7617f5a0460a76186
MD5 76b423f22e64213aca595474c63114cf
SHA1 961de79e9ac25c02185dd01420af96b8ec6c4d38
SHA512 0ae3a0234655d47968d33299dabba8555d2beef58cc2eff5ecd262f4a2a4473561cc3c2adc5d92112503a9967faee879c02862c04c23b3ee20339dae41de94c9
SSDEEP 98304:vMDUYJQsGnsfW4bbv7qyd/OH1ReRqdP9F674XEGVeZPYpy1GYMRLm:cuKWebv7191RqdP9c7BrgKuRL
TLSH
T1CEB66E03F89140E4C1ADD170C5668292BA733895973463DB3B64EAB93BE3BD46A7D3D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_76b423f22e64213aca595474c63114cf_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

File Explorer

2026-07-06_76b423f22e64213aca595474c63114cf_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

.exe 10.5MB

2026-07-06_76b423f22e64213aca595474c63114cf_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

IMPHASH b592463c9ca6cc22a90bfb9c258d9b78
SHA256 19fbcc7c3bb6dca094f07b55a2a79bd50f313951c108b4e7617f5a0460a76186
MD5 76b423f22e64213aca595474c63114cf
SHA1 961de79e9ac25c02185dd01420af96b8ec6c4d38
SHA512 0ae3a0234655d47968d33299dabba8555d2beef58cc2eff5ecd262f4a2a4473561cc3c2adc5d92112503a9967faee879c02862c04c23b3ee20339dae41de94c9
SSDEEP 98304:vMDUYJQsGnsfW4bbv7qyd/OH1ReRqdP9F674XEGVeZPYpy1GYMRLm:cuKWebv7191RqdP9c7BrgKuRL
TLSH
T1CEB66E03F89140E4C1ADD170C5668292BA733895973463DB3B64EAB93BE3BD46A7D3D0
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

wibucm64

ord48 ord50 ord52 ord54 ord66 ord76 ord80 ord89 ord100 ord126 ord130 ord180 ord216 ord218 ord220 ord222 ord230

kernel32

AddVectoredExceptionHandler CloseHandle CreateEventA CreateFileA CreateIoCompletionPort CreateThread CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FreeEnvironmentStringsW GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetLastError GetProcAddress GetProcessAffinityMask GetQueuedCompletionStatusEx GetStartupInfoA GetStdHandle GetSystemDirectoryA GetSystemInfo GetSystemTimeAsFileTime GetThreadContext GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW PostQueuedCompletionStatus QueryPerformanceCounter ResumeThread RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleCtrlHandler SetErrorMode SetEvent SetProcessPriorityBoost SetThreadContext SetUnhandledExceptionFilter SetWaitableTimer Sleep SuspendThread SwitchToThread TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFile __C_specific_handler

msvcrt

__getmainargs __initenv __iob_func __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _beginthread _cexit _errno _fmode _initterm _onexit abort calloc exit fprintf free fwrite malloc memcpy memset signal strlen strncmp vfprintf

Name

.text

Size

3.9MB

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

419KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

78B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

200KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

748KB

Virtual Size

752KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_76b423f22e64213aca595474c63114cf_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

wibucm64

kernel32

msvcrt

generic