General
- Target 2026-08-20_97e43e566b038d47215a5f7fb91cb0b0_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 23.4MB
- Sample260820-sdde8ael4z
- SHA256 468276ec40d219e463a879be52095fe441f1ec8669d9763bd5dcaf4d76b57d56
- MD5 97e43e566b038d47215a5f7fb91cb0b0
- SHA1 b7506da867f1336cc79aab6d747057f0db3d883a
- SHA512 5d5a91cbc6fe164dc15c489ec5e76708db4624285d953deb1731d0b3eec52138d6c36257b7fe108766df6501119c9748dfa09af26f4087e66166b6434243577c
- SSDEEP 98304:uYDe6T55VGHN1G8SvYyEOQCS23PkAiG1FMjMy/vF61+h88lfi8uSq6goJqoSVfwe:uS5cHN6vYfOQCv3PGnd61+t53uSUTiU
- TLSH T1C7373A06FA558AEECA6552348DAA43853770FC442F17A7C72A14B63C7CB73C5AEB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_97e43e566b038d47215a5f7fb91cb0b0_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_97e43e566b038d47215a5f7fb91cb0b0_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_97e43e566b038d47215a5f7fb91cb0b0_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 23.4MB
- SHA256 468276ec40d219e463a879be52095fe441f1ec8669d9763bd5dcaf4d76b57d56
- MD5 97e43e566b038d47215a5f7fb91cb0b0
- SHA1 b7506da867f1336cc79aab6d747057f0db3d883a
- SHA512 5d5a91cbc6fe164dc15c489ec5e76708db4624285d953deb1731d0b3eec52138d6c36257b7fe108766df6501119c9748dfa09af26f4087e66166b6434243577c
- SSDEEP 98304:uYDe6T55VGHN1G8SvYyEOQCS23PkAiG1FMjMy/vF61+h88lfi8uSq6goJqoSVfwe:uS5cHN6vYfOQCv3PGnd61+t53uSUTiU
- TLSH T1C7373A06FA558AEECA6552348DAA43853770FC442F17A7C72A14B63C7CB73C5AEB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.