General
- Target 2026-08-22_a1d11d90c0bd63ce975258f8addc1031_cobalt-strike_coinminer_glassworm_hive_luca-stealer
- Size 5.7MB
- Sample260822-ea3n2svwcw
- SHA256 469612b8f254a91fd81243acfb759d6286d6ce94eec8261f882e410e48f0e0d3
- MD5 a1d11d90c0bd63ce975258f8addc1031
- SHA1 6ec73797b45b01de2996565f77af54964561b601
- SHA512 dd16bf01e5c633d7cd8dd6938325e97b45931c998c692acf09cebcd8dadbca07de67f1bf812bcc9ab0467e8e3755e74f30760815f8d0a1d9fae455ba29a109ab
- SSDEEP 49152:qeOOJ2y1Lrb/TTvO90dL3BmAFd4A64nsfJ1Gs/M/LFJdcQm8Gc9b/Zol8uD1D0T9:pOkaNUTW/5gu6mBHYF5zAuLjyh6
- TLSH T1BC565DA3F9A284E8C4AFC1708A5787527A7178980B30E3DB1B5496732B57FD05EBD390
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-22_a1d11d90c0bd63ce975258f8addc1031_cobalt-strike_coinminer_glassworm_hive_luca-stealer.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_a1d11d90c0bd63ce975258f8addc1031_cobalt-strike_coinminer_glassworm_hive_luca-stealer
- Size 5.7MB
- SHA256 469612b8f254a91fd81243acfb759d6286d6ce94eec8261f882e410e48f0e0d3
- MD5 a1d11d90c0bd63ce975258f8addc1031
- SHA1 6ec73797b45b01de2996565f77af54964561b601
- SHA512 dd16bf01e5c633d7cd8dd6938325e97b45931c998c692acf09cebcd8dadbca07de67f1bf812bcc9ab0467e8e3755e74f30760815f8d0a1d9fae455ba29a109ab
- SSDEEP 49152:qeOOJ2y1Lrb/TTvO90dL3BmAFd4A64nsfJ1Gs/M/LFJdcQm8Gc9b/Zol8uD1D0T9:pOkaNUTW/5gu6mBHYF5zAuLjyh6
- TLSH T1BC565DA3F9A284E8C4AFC1708A5787527A7178980B30E3DB1B5496732B57FD05EBD390
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers