General
- Target 2026-07-18_afc60208e1104033341d79322265f0ab_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 12.3MB
- Sample260718-he9vpsev9v
- SHA256 ca2bf305f6ab3b9f113efed673cce527886f4d3ce91fe7d263f3a593a9b1a022
- MD5 afc60208e1104033341d79322265f0ab
- SHA1 d48e1c3c41ae21401252792582dbe442264e7686
- SHA512 6478938fe82bcfa96205728f42204c42c02dd2d050a09e0a649297fe44ceb52eab1818012fdc90701f6219079223fae5e8f33b66bfdda5de5d674f87bd1ce0d2
- SSDEEP 196608:Yw64p8UAnZbVCQpsyHGfvRTAU9oy0PHx1WYPox:myOnZbVC4GfJYywHx0YPU
- TLSH T1C2D67B43E87552A0D2E9C176C676C192BA703C894B3063D37B51FABA2F73BC46A79344
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-18_afc60208e1104033341d79322265f0ab_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_gla.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_afc60208e1104033341d79322265f0ab_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- Size 12.3MB
- SHA256 ca2bf305f6ab3b9f113efed673cce527886f4d3ce91fe7d263f3a593a9b1a022
- MD5 afc60208e1104033341d79322265f0ab
- SHA1 d48e1c3c41ae21401252792582dbe442264e7686
- SHA512 6478938fe82bcfa96205728f42204c42c02dd2d050a09e0a649297fe44ceb52eab1818012fdc90701f6219079223fae5e8f33b66bfdda5de5d674f87bd1ce0d2
- SSDEEP 196608:Yw64p8UAnZbVCQpsyHGfvRTAU9oy0PHx1WYPox:myOnZbVC4GfJYywHx0YPU
- TLSH T1C2D67B43E87552A0D2E9C176C676C192BA703C894B3063D37B51FABA2F73BC46A79344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting