2026-07-22_562545ed157855dc834fa1f0eab7f769_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_562545ed157855dc834fa1f0eab7f769_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat
Size 10.5MB
Sample260722-wd1sas1bme
SHA256 c97a513ae904a7f5298556e7d1898520e7c4067d8ec70b2963dabcb7f9061cfe
MD5 562545ed157855dc834fa1f0eab7f769
SHA1 3cb79655c04f8a4ec050f9cecd94ab9be9b7ef82
SHA512 5629c7c85d14a316b16c1e9cc81c04827ffef350fc2ae91a806188c9fec26826164679e015f77832f3c2a1aaac650a4f40287e5783909d55e6523adb99c5586d
SSDEEP 98304:1MDUYJQsGnsfW4bbv7qyd/OH1ReRqdP9F674XEGVeZPYpy1GYMGLm:+uKWebv7191RqdP9c7BrgKuGL
TLSH
T187B66E03F89140E4C1ADD170C5668292BA733895973463DB3B64EAB93BE3BD46A7D3D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_562545ed157855dc834fa1f0eab7f769_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

File Explorer

2026-07-22_562545ed157855dc834fa1f0eab7f769_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

.exe 10.5MB

2026-07-22_562545ed157855dc834fa1f0eab7f769_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

IMPHASH b592463c9ca6cc22a90bfb9c258d9b78
SHA256 c97a513ae904a7f5298556e7d1898520e7c4067d8ec70b2963dabcb7f9061cfe
MD5 562545ed157855dc834fa1f0eab7f769
SHA1 3cb79655c04f8a4ec050f9cecd94ab9be9b7ef82
SHA512 5629c7c85d14a316b16c1e9cc81c04827ffef350fc2ae91a806188c9fec26826164679e015f77832f3c2a1aaac650a4f40287e5783909d55e6523adb99c5586d
SSDEEP 98304:1MDUYJQsGnsfW4bbv7qyd/OH1ReRqdP9F674XEGVeZPYpy1GYMGLm:+uKWebv7191RqdP9c7BrgKuGL
TLSH
T187B66E03F89140E4C1ADD170C5668292BA733895973463DB3B64EAB93BE3BD46A7D3D0
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

wibucm64

ord48 ord50 ord52 ord54 ord66 ord76 ord80 ord89 ord100 ord126 ord130 ord180 ord216 ord218 ord220 ord222 ord230

kernel32

AddVectoredExceptionHandler CloseHandle CreateEventA CreateFileA CreateIoCompletionPort CreateThread CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FreeEnvironmentStringsW GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetLastError GetProcAddress GetProcessAffinityMask GetQueuedCompletionStatusEx GetStartupInfoA GetStdHandle GetSystemDirectoryA GetSystemInfo GetSystemTimeAsFileTime GetThreadContext GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW PostQueuedCompletionStatus QueryPerformanceCounter ResumeThread RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleCtrlHandler SetErrorMode SetEvent SetProcessPriorityBoost SetThreadContext SetUnhandledExceptionFilter SetWaitableTimer Sleep SuspendThread SwitchToThread TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFile __C_specific_handler

msvcrt

__getmainargs __initenv __iob_func __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _beginthread _cexit _errno _fmode _initterm _onexit abort calloc exit fprintf free fwrite malloc memcpy memset signal strlen strncmp vfprintf

Name

.text

Size

3.9MB

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

419KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

78B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

200KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

748KB

Virtual Size

752KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_562545ed157855dc834fa1f0eab7f769_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat

wibucm64

kernel32

msvcrt

generic