General
- Target 2026-07-30_c63197111d1405378bfc62491f1d07b6_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 19.4MB
- Sample260730-hjtdhsem2y
- SHA256 23accb62e2ba5e85c50af06b2bb5e25432cc5875e7dd70de89a24e285ce49437
- MD5 c63197111d1405378bfc62491f1d07b6
- SHA1 c9d7691ccdba79bb829a7eac75c2004333819290
- SHA512 689c29b364d7e11d30cdd07a51464882921c14f400e1d6c79d26da5066b900b9db1e501ec1a7348ba0c84e4922dc83a225677a60808e48bdc1b06c01179f9edb
- SSDEEP 98304:gD3KvBg0XbpVSRHyYQtd3Mz08IH9AvppgZgF+++MeAoqEMwjmCgEai4+xMDy3MKa:gLeVSF+L3Mg/+Lv+VUELNBy
- TLSH T14C272847F89140E4C9ADD135C6254222BB717C891B3077D72B60F6B82F76BE86BBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_c63197111d1405378bfc62491f1d07b6_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_c63197111d1405378bfc62491f1d07b6_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_c63197111d1405378bfc62491f1d07b6_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 19.4MB
- SHA256 23accb62e2ba5e85c50af06b2bb5e25432cc5875e7dd70de89a24e285ce49437
- MD5 c63197111d1405378bfc62491f1d07b6
- SHA1 c9d7691ccdba79bb829a7eac75c2004333819290
- SHA512 689c29b364d7e11d30cdd07a51464882921c14f400e1d6c79d26da5066b900b9db1e501ec1a7348ba0c84e4922dc83a225677a60808e48bdc1b06c01179f9edb
- SSDEEP 98304:gD3KvBg0XbpVSRHyYQtd3Mz08IH9AvppgZgF+++MeAoqEMwjmCgEai4+xMDy3MKa:gLeVSF+L3Mg/+Lv+VUELNBy
- TLSH T14C272847F89140E4C9ADD135C6254222BB717C891B3077D72B60F6B82F76BE86BBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory