General
- Target 2026-08-21_4c294385851aea3660b0a9fc0e2c8032_cobalt-strike_coinminer_glassworm_luca-stealer
- Size 5.6MB
- Sample260822-swt6pahn4t
- SHA256 2e61d0b65d18f9d8c52c4531c14f12978b2157324dd08eb31ba6c91e782a09f8
- MD5 4c294385851aea3660b0a9fc0e2c8032
- SHA1 0c85410e66442b3824b0117ca59cb3c115699b63
- SHA512 c32976f2762a82ec2c128d1fe85826c44bcbd525759d8d413ff88815cb3f69b6a953ee849d08ad9eb82223c29a7f3dfee3e3adaecee60ab4b1873975a86d69fb
- SSDEEP 49152:IiT1rDjrZDqDtDSgv1tMWkZ/dSgRAG3cVKimNnFCRDnh3NDOWQ1GNnqVkCR1rJHX:B1rXRqB0xIJKimNFCL9OWXdk0X6eeeW
- TLSH T1A3464B06F8E300E9C57EE17886969322BA7138A643307BD75F9496752A75FE47E3E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-21_4c294385851aea3660b0a9fc0e2c8032_cobalt-strike_coinminer_glassworm_luca-stealer.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4c294385851aea3660b0a9fc0e2c8032_cobalt-strike_coinminer_glassworm_luca-stealer
- Size 5.6MB
- SHA256 2e61d0b65d18f9d8c52c4531c14f12978b2157324dd08eb31ba6c91e782a09f8
- MD5 4c294385851aea3660b0a9fc0e2c8032
- SHA1 0c85410e66442b3824b0117ca59cb3c115699b63
- SHA512 c32976f2762a82ec2c128d1fe85826c44bcbd525759d8d413ff88815cb3f69b6a953ee849d08ad9eb82223c29a7f3dfee3e3adaecee60ab4b1873975a86d69fb
- SSDEEP 49152:IiT1rDjrZDqDtDSgv1tMWkZ/dSgRAG3cVKimNnFCRDnh3NDOWQ1GNnqVkCR1rJHX:B1rXRqB0xIJKimNFCL9OWXdk0X6eeeW
- TLSH T1A3464B06F8E300E9C57EE17886969322BA7138A643307BD75F9496752A75FE47E3E300
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers