General
- Target 2026-08-01_e1c7540a507397a816cc695397fffcba_cobalt-strike_coinminer_dosia_glassworm_hive_icedid_luca-stealer_njrat_poet-rat_quasar-rat_vidar
- Size 14.8MB
- Sample260801-xsaebseq2w
- SHA256 de6986cd4c5405bff52154e08665be736f9af4cf6aa30f6c33932ce0a07578b7
- MD5 e1c7540a507397a816cc695397fffcba
- SHA1 42a3b08dac47aa906f95a3a4907ec36874e6e933
- SHA512 4413eb1d048e0380c30edebee0347331f33c2873c33c1e11069e9b7b4f57d280428fce9e0788cb6b2ed5e3a76b45e93ce2f4521ca5abc8c29214dace8f2355fb
- SSDEEP 196608:y+5Di65sVf2LHhkY7AT1tmFFF1GZoXa3do9:yoDi65sVY8T1tmFFF1GeXa3do9
- TLSH T10EF67D47F592A0ECE07AD1708666E2B3B670B854073467D72B90E7B52F23BD01A7A734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_e1c7540a507397a816cc695397fffcba_cobalt-strike_coinminer_dosia_glassworm_hive_icedid_luca.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_e1c7540a507397a816cc695397fffcba_cobalt-strike_coinminer_dosia_glassworm_hive_icedid_luca.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_e1c7540a507397a816cc695397fffcba_cobalt-strike_coinminer_dosia_glassworm_hive_icedid_luca-stealer_njrat_poet-rat_quasar-rat_vidar
- Size 14.8MB
- SHA256 de6986cd4c5405bff52154e08665be736f9af4cf6aa30f6c33932ce0a07578b7
- MD5 e1c7540a507397a816cc695397fffcba
- SHA1 42a3b08dac47aa906f95a3a4907ec36874e6e933
- SHA512 4413eb1d048e0380c30edebee0347331f33c2873c33c1e11069e9b7b4f57d280428fce9e0788cb6b2ed5e3a76b45e93ce2f4521ca5abc8c29214dace8f2355fb
- SSDEEP 196608:y+5Di65sVf2LHhkY7AT1tmFFF1GZoXa3do9:yoDi65sVY8T1tmFFF1GeXa3do9
- TLSH T10EF67D47F592A0ECE07AD1708666E2B3B670B854073467D72B90E7B52F23BD01A7A734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
UPX dump on OEP (original entry point)