General
- Target 2026-08-05_fda39d298c1bfe52a47945eb1e30f25c_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 10.0MB
- Sample260805-sd1kravvew
- SHA256 537e68a96ab38b314c828af799f48604b6b8e044c6e6cde0920c913b90a1508e
- MD5 fda39d298c1bfe52a47945eb1e30f25c
- SHA1 1e7dc91d800653f16e302379bc8aad15c776a2e8
- SHA512 cbaf1f52e7ee13477f6ae51337b13e7e6030ed5940d689a68464590e6c06c74d806f036728c778c984f7de7a0d49d715fe6292050bda34129115f6c53ee8b53d
- SSDEEP 98304:/mPUf5A91QP5oToUsbeRwcyHekFeSpc12EKw+KVktWHBLmpTN5huJd3kMerGpNT3:+qqQP5oKswpLi3gOWq
- TLSH T1CDB65C47E99241E8C4AAD1308667A273BA317C151B2427E72B90F7382F77FD05EBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_fda39d298c1bfe52a47945eb1e30f25c_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_fda39d298c1bfe52a47945eb1e30f25c_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_fda39d298c1bfe52a47945eb1e30f25c_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 10.0MB
- SHA256 537e68a96ab38b314c828af799f48604b6b8e044c6e6cde0920c913b90a1508e
- MD5 fda39d298c1bfe52a47945eb1e30f25c
- SHA1 1e7dc91d800653f16e302379bc8aad15c776a2e8
- SHA512 cbaf1f52e7ee13477f6ae51337b13e7e6030ed5940d689a68464590e6c06c74d806f036728c778c984f7de7a0d49d715fe6292050bda34129115f6c53ee8b53d
- SSDEEP 98304:/mPUf5A91QP5oToUsbeRwcyHekFeSpc12EKw+KVktWHBLmpTN5huJd3kMerGpNT3:+qqQP5oKswpLi3gOWq
- TLSH T1CDB65C47E99241E8C4AAD1308667A273BA317C151B2427E72B90F7382F77FD05EBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory