General
- Target 2026-07-30_ff8a205e1c24be376a6cfd4fd36d4d81_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 19.4MB
- Sample260730-hfcatsel5y
- SHA256 e7a1ece9194d18918c2e393be9211eb11732ddd0397fe17e57d030b4d4349458
- MD5 ff8a205e1c24be376a6cfd4fd36d4d81
- SHA1 6b89ae1c4ca429eae9b5a4be8b70cd8de383ec0f
- SHA512 4a9dd1f8ca8ec3dd8a5b2f3f97f5ef3992ea37b93ae43010d48a2650471b18b2ed6a5715a654fffad8672ba99df3d515b29fb67073a197cee738ffaf8851f39c
- SSDEEP 98304:uD3KvBg0XbpVSRHyYQtd3Mz08IH9AvppgZgF+++MeAoqEMwjmCgEai4+xMDy3MKJ:uLeVSF+L3Mg/+Lv+VUELNBh
- TLSH T1D4272847F89140E4C9ADD135C6254222BB717C891B3077D72B60F6B82F76BE86BBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_ff8a205e1c24be376a6cfd4fd36d4d81_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_ff8a205e1c24be376a6cfd4fd36d4d81_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_ff8a205e1c24be376a6cfd4fd36d4d81_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 19.4MB
- SHA256 e7a1ece9194d18918c2e393be9211eb11732ddd0397fe17e57d030b4d4349458
- MD5 ff8a205e1c24be376a6cfd4fd36d4d81
- SHA1 6b89ae1c4ca429eae9b5a4be8b70cd8de383ec0f
- SHA512 4a9dd1f8ca8ec3dd8a5b2f3f97f5ef3992ea37b93ae43010d48a2650471b18b2ed6a5715a654fffad8672ba99df3d515b29fb67073a197cee738ffaf8851f39c
- SSDEEP 98304:uD3KvBg0XbpVSRHyYQtd3Mz08IH9AvppgZgF+++MeAoqEMwjmCgEai4+xMDy3MKJ:uLeVSF+L3Mg/+Lv+VUELNBh
- TLSH T1D4272847F89140E4C9ADD135C6254222BB717C891B3077D72B60F6B82F76BE86BBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory