Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 01:25
Behavioral task
behavioral1
Sample
2026-07-30_738e4500f276ceb8fd9b7c2e86292efb_cobalt-strike_coinminer_dosia_glassworm_hive_luca-steale.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_738e4500f276ceb8fd9b7c2e86292efb_cobalt-strike_coinminer_dosia_glassworm_hive_luca-steale.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target 2026-07-30_738e4500f276ceb8fd9b7c2e86292efb_cobalt-strike_coinminer_dosia_glassworm_hive_luca-steale.exe
- Size 47.3MB
- Sample260730-btff3sbj2w
- SHA256 da7a4e29605fb051e18f7e2ac7d3e222751432ff5975a336962b8595b6b523e1
- MD5 738e4500f276ceb8fd9b7c2e86292efb
- SHA1 3384fd4b6893a6654cc33372a327c62d23dd07f7
- SHA512 1f6c63d1fa14867519b2845bb09f03971e5e046afc8fedd4bcf3666583c35d370f525fd7a5a5c6873284bfea0a5320407d6912b83c83bce1359590919c16b2ba
- SSDEEP 196608:guH9EUWpp9PP6WVfEWMvRkkts1GoD1el1mMa/oVPKRj2SC6ovw+:JH9EVV6CcXvePRsKRj2X6o
- TLSH T167B73753B991D090C698D134C625D2D3BBA138964B2023C37BDCAF7F6F72AD4967A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 1 IoCs
resource yara_rule behavioral2/memory/252-0-0x0000000000C70000-0x0000000003BBC000-memory.dmp INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL - Detects executables referencing many IR and analysis tools 1 IoCs
resource yara_rule behavioral2/memory/252-0-0x0000000000C70000-0x0000000003BBC000-memory.dmp INDICATOR_SUSPICIOUS_References_SecTools - UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule behavioral2/memory/252-0-0x0000000000C70000-0x0000000003BBC000-memory.dmp UPX -
resource yara_rule behavioral2/memory/252-0-0x0000000000C70000-0x0000000003BBC000-memory.dmp upx