General

  • Target
    2026-07-10_b0fb9e016a5120219ee62ee02dfdbd43_cobalt-strike_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat
  • Size 13.2MB
  • Sample260710-grnybsdz5j
  • SHA256 f697f22ece129cc065e8a2bc849c96b5a0137c0f4a7ba26c95de492982e5785d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • cobaltstrike

Botnet
  • 0

C2
  • http://123.207.205.240:50188/updates.rss

Attributes
  • watermark

    0

Targets

    • Target
      2026-07-10_b0fb9e016a5120219ee62ee02dfdbd43_cobalt-strike_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat
    • Size 13.2MB
    • SHA256 f697f22ece129cc065e8a2bc849c96b5a0137c0f4a7ba26c95de492982e5785d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

    • Detects Reflective DLL injection artifacts

MITRE ATT&CK Matrix

Tasks