General
- Target 2026-08-07_c74eb7ac3f3f729269a9fc9236497a23_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_snatch
- Size 14.9MB
- Sample260807-eaxssszvew
- SHA256 d6769c4be39df4067599682707530d5a501c97cddc6cd3dbf4916a296f6d679e
- MD5 c74eb7ac3f3f729269a9fc9236497a23
- SHA1 67683d53668017804e52575567da94a8c6eb84f2
- SHA512 d1f29855e71fbe7d982822e64c6fc4baac407e6e7e51de835384081c532b7ff1ba87428908a1cc3aa1b1b77c24f733004ed9b73493b9c76a645e9d5a187bcddb
- SSDEEP 49152:E6Xlz+7WCl3aJDEamrb/T3vO90d7HjmAFd4A64nsfJp8WmWa991d4y/RDG2eD7Mu:pOl3CofWMyyLEUee39Y4YeGErV5zdjS
- TLSH T1A3F62943F84148E1D5D9D174C62A4222777078870F243BDB3B64BABC2F76BD89ABA354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-07_c74eb7ac3f3f729269a9fc9236497a23_cobalt-strike_coinminer_dosia_glassworm_hive_luca-steale.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_c74eb7ac3f3f729269a9fc9236497a23_cobalt-strike_coinminer_dosia_glassworm_hive_luca-steale.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_c74eb7ac3f3f729269a9fc9236497a23_cobalt-strike_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_snatch
- Size 14.9MB
- SHA256 d6769c4be39df4067599682707530d5a501c97cddc6cd3dbf4916a296f6d679e
- MD5 c74eb7ac3f3f729269a9fc9236497a23
- SHA1 67683d53668017804e52575567da94a8c6eb84f2
- SHA512 d1f29855e71fbe7d982822e64c6fc4baac407e6e7e51de835384081c532b7ff1ba87428908a1cc3aa1b1b77c24f733004ed9b73493b9c76a645e9d5a187bcddb
- SSDEEP 49152:E6Xlz+7WCl3aJDEamrb/T3vO90d7HjmAFd4A64nsfJp8WmWa991d4y/RDG2eD7Mu:pOl3CofWMyyLEUee39Y4YeGErV5zdjS
- TLSH T1A3F62943F84148E1D5D9D174C62A4222777078870F243BDB3B64BABC2F76BD89ABA354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects executables referencing many varying, potentially fake Windows User-Agents
-
UPX dump on OEP (original entry point)