General
- Target 2026-07-30_97e53663123b9dee1e9c0c887505cdee_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 19.4MB
- Sample260730-hmkksaem5s
- SHA256 43ab96a6456b48c2116bd8fb3bbb16d6d5cb91fbbd3584b391228dbcd41d2791
- MD5 97e53663123b9dee1e9c0c887505cdee
- SHA1 29a0519748910256903fbec627766a4bfdcbf805
- SHA512 051e6d114b9ab888e74e7db48166ce6cdf1503b740d9934a54a6605ba93e706b4bf64a45ef548bba1cd7da07be4a36754d5e4de02c246ccb1042f41ceb6bb906
- SSDEEP 98304:KD3KvBg0XbpVSRHyYQtd3Mz08IH9AvppgZgF+++MeAoqEMwjmCgEai4+xMDy3MKa:KLeVSF+L3Mg/+Lv+VUELNBy
- TLSH T198272847F89140E4C9ADD135C6254222BB717C891B3077D72B60F6B82F76BE86BBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_97e53663123b9dee1e9c0c887505cdee_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_97e53663123b9dee1e9c0c887505cdee_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_97e53663123b9dee1e9c0c887505cdee_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 19.4MB
- SHA256 43ab96a6456b48c2116bd8fb3bbb16d6d5cb91fbbd3584b391228dbcd41d2791
- MD5 97e53663123b9dee1e9c0c887505cdee
- SHA1 29a0519748910256903fbec627766a4bfdcbf805
- SHA512 051e6d114b9ab888e74e7db48166ce6cdf1503b740d9934a54a6605ba93e706b4bf64a45ef548bba1cd7da07be4a36754d5e4de02c246ccb1042f41ceb6bb906
- SSDEEP 98304:KD3KvBg0XbpVSRHyYQtd3Mz08IH9AvppgZgF+++MeAoqEMwjmCgEai4+xMDy3MKa:KLeVSF+L3Mg/+Lv+VUELNBy
- TLSH T198272847F89140E4C9ADD135C6254222BB717C891B3077D72B60F6B82F76BE86BBA350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory