General
- Target 2026-08-12_b430c06396b193d7888a5b6e48abb5dc_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 24.0MB
- Sample260812-t97jls1cpf
- SHA256 20e5734cac00fd9b1f01bdbd613a7b02e009c32dd1b3be6d09191d9535c73cff
- MD5 b430c06396b193d7888a5b6e48abb5dc
- SHA1 a28eb1f4b7d6dcb88ef97ed45e5c357411edf95e
- SHA512 aba171a75c6eacda5254f6c710dfb58c70868cd9036ab1d0754e46dac8b10161e2efd218c8430fe5521ed6c6645d0f79426551dc87a09d3abb74ebd4c9e58b44
- SSDEEP 196608:1OxZ6wzAU0fOJxChmyfRQbx1mVoCAV9juCl:1OJzn0GS3fRySoC2YCl
- TLSH T1E2473906FA518AEACA6952748DAB42853770FC842F17A7C71A14F63CBCB33D59DB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_b430c06396b193d7888a5b6e48abb5dc_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_b430c06396b193d7888a5b6e48abb5dc_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_b430c06396b193d7888a5b6e48abb5dc_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 24.0MB
- SHA256 20e5734cac00fd9b1f01bdbd613a7b02e009c32dd1b3be6d09191d9535c73cff
- MD5 b430c06396b193d7888a5b6e48abb5dc
- SHA1 a28eb1f4b7d6dcb88ef97ed45e5c357411edf95e
- SHA512 aba171a75c6eacda5254f6c710dfb58c70868cd9036ab1d0754e46dac8b10161e2efd218c8430fe5521ed6c6645d0f79426551dc87a09d3abb74ebd4c9e58b44
- SSDEEP 196608:1OxZ6wzAU0fOJxChmyfRQbx1mVoCAV9juCl:1OJzn0GS3fRySoC2YCl
- TLSH T1E2473906FA518AEACA6952748DAB42853770FC842F17A7C71A14F63CBCB33D59DB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.