General
- Target 2026-08-12_b44fdfdb48da5747e212515c48ba2ac4_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 22.4MB
- Sample260812-s8m8xade96
- SHA256 f02b8aa42bb1e1962fea39214ae1cd8d0c2157692fb1f64c1f4a7fd2a7243172
- MD5 b44fdfdb48da5747e212515c48ba2ac4
- SHA1 d005a7e91b2fcf1b28ced29b130b68464c6bbf73
- SHA512 b77e938b118b190cc427c951ff83dfbaec07a35debb1eaab4708be4deefbc75cc7de0efcca837770ecb60c36e72403dff1efdf6c375fa38e7eaf86206a894059
- SSDEEP 196608:XWMt0j8dTWNOmSJ7G1NStDWV1Q+mdZ4Uh:XSjoTyOmSJ7G1NV1RAzh
- TLSH T163372806FA9189EECA59927588AB42853770FC482F17A7C72A05F63C7D733D5ADB8340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_b44fdfdb48da5747e212515c48ba2ac4_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_b44fdfdb48da5747e212515c48ba2ac4_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_b44fdfdb48da5747e212515c48ba2ac4_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 22.4MB
- SHA256 f02b8aa42bb1e1962fea39214ae1cd8d0c2157692fb1f64c1f4a7fd2a7243172
- MD5 b44fdfdb48da5747e212515c48ba2ac4
- SHA1 d005a7e91b2fcf1b28ced29b130b68464c6bbf73
- SHA512 b77e938b118b190cc427c951ff83dfbaec07a35debb1eaab4708be4deefbc75cc7de0efcca837770ecb60c36e72403dff1efdf6c375fa38e7eaf86206a894059
- SSDEEP 196608:XWMt0j8dTWNOmSJ7G1NStDWV1Q+mdZ4Uh:XSjoTyOmSJ7G1NV1RAzh
- TLSH T163372806FA9189EECA59927588AB42853770FC482F17A7C72A05F63C7D733D5ADB8340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.