General
- Target 2026-08-22_c5106b01532288c109cff15a72547f13_cobalt-strike_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat
- Size 4.8MB
- Sample260823-a5824adk6v
- SHA256 cdaa8537ae9097bd474d6a863a415f2b6593fbda7e9d07e2b68269df870e3226
- MD5 c5106b01532288c109cff15a72547f13
- SHA1 62366fa3450f038509fb9abaf1014b6ba7dbc67d
- SHA512 e67223ba89be6511ff060e975ea517e26e120d6d3f43f3c0420954cdea5748642e4e6fd5169d5df99355a049a030ea817b574a7a37a5748d2d36268f987b127f
- SSDEEP 98304:FMd3//vRZHZV0E/NZx8GH9r98O2LebEY+zjAG:FMV/BZHxVHc
- TLSH T163365B07F981D5F9C0AAD2308662D293BA717C885B3063D32B50FB792A77BD46E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_c5106b01532288c109cff15a72547f13_cobalt-strike_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_c5106b01532288c109cff15a72547f13_cobalt-strike_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_c5106b01532288c109cff15a72547f13_cobalt-strike_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat
- Size 4.8MB
- SHA256 cdaa8537ae9097bd474d6a863a415f2b6593fbda7e9d07e2b68269df870e3226
- MD5 c5106b01532288c109cff15a72547f13
- SHA1 62366fa3450f038509fb9abaf1014b6ba7dbc67d
- SHA512 e67223ba89be6511ff060e975ea517e26e120d6d3f43f3c0420954cdea5748642e4e6fd5169d5df99355a049a030ea817b574a7a37a5748d2d36268f987b127f
- SSDEEP 98304:FMd3//vRZHZV0E/NZx8GH9r98O2LebEY+zjAG:FMV/BZHxVHc
- TLSH T163365B07F981D5F9C0AAD2308662D293BA717C885B3063D32B50FB792A77BD46E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Hide Artifacts: Hidden Files and Directories