General
- Target 2026-08-21_ca5d25bbb16f087b833abc12d06a2c46_cobalt-strike_coinminer_glassworm_luca-stealer
- Size 5.9MB
- Sample260822-gj8b1a1fle
- SHA256 88f1f3734880f6788a561895c86c38d1a7633c4711ab2b7257d63df9649ab13f
- MD5 ca5d25bbb16f087b833abc12d06a2c46
- SHA1 52f2d6b07ed65bfd3344e2177a6c7b745c170620
- SHA512 a944c567ca3178560a7340c7fe43cf70f4f271140e3dcad35a7485ed261b7d440c633f81c0c088dc1c94f35639afc37df868faefd1eb44ad15a72835080ed347
- SSDEEP 49152:fQlaANTLy1z1PiD1BIlJGgSF60zKst2w4WLgkeG1oB+UQ8N5B:PAlLuGk+U/N5B
- TLSH T1B856AC06FF9049EBCA1592B68DA603C43374FC591F26A7C72A08B27D2DB77E89D64344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_ca5d25bbb16f087b833abc12d06a2c46_cobalt-strike_coinminer_glassworm_luca-stealer.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_ca5d25bbb16f087b833abc12d06a2c46_cobalt-strike_coinminer_glassworm_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_ca5d25bbb16f087b833abc12d06a2c46_cobalt-strike_coinminer_glassworm_luca-stealer
- Size 5.9MB
- SHA256 88f1f3734880f6788a561895c86c38d1a7633c4711ab2b7257d63df9649ab13f
- MD5 ca5d25bbb16f087b833abc12d06a2c46
- SHA1 52f2d6b07ed65bfd3344e2177a6c7b745c170620
- SHA512 a944c567ca3178560a7340c7fe43cf70f4f271140e3dcad35a7485ed261b7d440c633f81c0c088dc1c94f35639afc37df868faefd1eb44ad15a72835080ed347
- SSDEEP 49152:fQlaANTLy1z1PiD1BIlJGgSF60zKst2w4WLgkeG1oB+UQ8N5B:PAlLuGk+U/N5B
- TLSH T1B856AC06FF9049EBCA1592B68DA603C43374FC591F26A7C72A08B27D2DB77E89D64344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
mimikatz is an open source tool to dump credentials on Windows
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers