General
- Target 2026-08-12_2a064f7c2dc1c7ea5374610d7a079e7c_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 23.4MB
- Sample260812-vhgpjs1ejc
- SHA256 aa2c8e94eb8e9c9d457bfaa8bb8e991d9f58d55153fb3cce6ae5df3eba1a0e1b
- MD5 2a064f7c2dc1c7ea5374610d7a079e7c
- SHA1 a62914633024ed3a89fbe91ddbe2429920ded4d2
- SHA512 b3793ee2ed862b7a8726c6b6dc2368f3d3f4a0ab10d65d67eb6c0b331287cedfb91b04ded919103b656956e32cf947d5de2f2f5758b71dfcf72abfe956b6a534
- SSDEEP 196608:lysPHhgjVDj8gzl3sZiuvUXMCk7BznVaYJas:ljHa5DbuDfzVRas
- TLSH T17F373A06FB958AEACA6952748DAA43853770FC441F17A7C72A14B63C7CB33C99DB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_2a064f7c2dc1c7ea5374610d7a079e7c_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_2a064f7c2dc1c7ea5374610d7a079e7c_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_2a064f7c2dc1c7ea5374610d7a079e7c_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 23.4MB
- SHA256 aa2c8e94eb8e9c9d457bfaa8bb8e991d9f58d55153fb3cce6ae5df3eba1a0e1b
- MD5 2a064f7c2dc1c7ea5374610d7a079e7c
- SHA1 a62914633024ed3a89fbe91ddbe2429920ded4d2
- SHA512 b3793ee2ed862b7a8726c6b6dc2368f3d3f4a0ab10d65d67eb6c0b331287cedfb91b04ded919103b656956e32cf947d5de2f2f5758b71dfcf72abfe956b6a534
- SSDEEP 196608:lysPHhgjVDj8gzl3sZiuvUXMCk7BznVaYJas:ljHa5DbuDfzVRas
- TLSH T17F373A06FB958AEACA6952748DAA43853770FC441F17A7C72A14B63C7CB33C99DB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.