General
- Target 2026-07-17_9ae57702ed1832a425085cd50f862a52_cobalt-strike_coinminer_dosia_glassworm_poet-rat_qilin_quasar-rat_rex
- Size 33.8MB
- Sample260718-dad51sdx9q
- SHA256 ccb18794c5121381a59e7295b18c4127fa840d98e711c72aa15e54f62d0f085a
- MD5 9ae57702ed1832a425085cd50f862a52
- SHA1 40665cce72fd050d26193ba5b4654a807e3a9a2c
- SHA512 a12f735802c2bfc818b037c1a159c368f1ccdc8b052dcae3f241cdbe6c705c23e5e82c37d85488cef12709f3a817caec06b7f5b66c966235e459b638ce16ba68
- SSDEEP 196608:QgxgReH7LfdjMLTkSTSG8jwz6p8tAbNYFQGhNQhox2PCOtwhjT6FihWS:QtsH7WkoHtG2FQGhNwoH
- TLSH T17A775C27A86559D5C5DFC171856381027BB23849933063CB2B64AE30BF777E0AEBE784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_9ae57702ed1832a425085cd50f862a52_cobalt-strike_coinminer_dosia_glassworm_poet-rat_qilin_quasar-rat_rex.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_9ae57702ed1832a425085cd50f862a52_cobalt-strike_coinminer_dosia_glassworm_poet-rat_qilin_quasar-rat_rex.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_9ae57702ed1832a425085cd50f862a52_cobalt-strike_coinminer_dosia_glassworm_poet-rat_qilin_quasar-rat_rex
- Size 33.8MB
- SHA256 ccb18794c5121381a59e7295b18c4127fa840d98e711c72aa15e54f62d0f085a
- MD5 9ae57702ed1832a425085cd50f862a52
- SHA1 40665cce72fd050d26193ba5b4654a807e3a9a2c
- SHA512 a12f735802c2bfc818b037c1a159c368f1ccdc8b052dcae3f241cdbe6c705c23e5e82c37d85488cef12709f3a817caec06b7f5b66c966235e459b638ce16ba68
- SSDEEP 196608:QgxgReH7LfdjMLTkSTSG8jwz6p8tAbNYFQGhNQhox2PCOtwhjT6FihWS:QtsH7WkoHtG2FQGhNwoH
- TLSH T17A775C27A86559D5C5DFC171856381027BB23849933063CB2B64AE30BF777E0AEBE784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen