General
- Target 2026-07-30_738e4500f276ceb8fd9b7c2e86292efb_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_ngrbot_poet-rat_quasar-rat_rex_snatch_zxxz
- Size 47.3MB
- Sample260730-btff3sbj2w
- SHA256 da7a4e29605fb051e18f7e2ac7d3e222751432ff5975a336962b8595b6b523e1
- MD5 738e4500f276ceb8fd9b7c2e86292efb
- SHA1 3384fd4b6893a6654cc33372a327c62d23dd07f7
- SHA512 1f6c63d1fa14867519b2845bb09f03971e5e046afc8fedd4bcf3666583c35d370f525fd7a5a5c6873284bfea0a5320407d6912b83c83bce1359590919c16b2ba
- SSDEEP 196608:guH9EUWpp9PP6WVfEWMvRkkts1GoD1el1mMa/oVPKRj2SC6ovw+:JH9EVV6CcXvePRsKRj2X6o
- TLSH T167B73753B991D090C698D134C625D2D3BBA138964B2023C37BDCAF7F6F72AD4967A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_738e4500f276ceb8fd9b7c2e86292efb_cobalt-strike_coinminer_dosia_glassworm_hive_luca-steale.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_738e4500f276ceb8fd9b7c2e86292efb_cobalt-strike_coinminer_dosia_glassworm_hive_luca-steale.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_738e4500f276ceb8fd9b7c2e86292efb_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_ngrbot_poet-rat_quasar-rat_rex_snatch_zxxz
- Size 47.3MB
- SHA256 da7a4e29605fb051e18f7e2ac7d3e222751432ff5975a336962b8595b6b523e1
- MD5 738e4500f276ceb8fd9b7c2e86292efb
- SHA1 3384fd4b6893a6654cc33372a327c62d23dd07f7
- SHA512 1f6c63d1fa14867519b2845bb09f03971e5e046afc8fedd4bcf3666583c35d370f525fd7a5a5c6873284bfea0a5320407d6912b83c83bce1359590919c16b2ba
- SSDEEP 196608:guH9EUWpp9PP6WVfEWMvRkkts1GoD1el1mMa/oVPKRj2SC6ovw+:JH9EVV6CcXvePRsKRj2X6o
- TLSH T167B73753B991D090C698D134C625D2D3BBA138964B2023C37BDCAF7F6F72AD4967A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables referencing many IR and analysis tools
-
UPX dump on OEP (original entry point)