General
- Target 2026-08-24_65ecbb8ae9f19e03c93f1b6dbd9137b4_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 23.5MB
- Sample260825-nrd7fsgh87
- SHA256 2677ca48cb154022336de47bd8a4852a9768e775c8a72134645685976dd523b0
- MD5 65ecbb8ae9f19e03c93f1b6dbd9137b4
- SHA1 4ef465b47420c4a54091e74fee0fcadd5011bb6d
- SHA512 70562878ce8768db192a6b9f4476292563f7997495d0edd3aabf3971b8cfec92c5ad602664d2e0fd61f4f8f7fdd896ada5206e586187df5d5053978684fa3247
- SSDEEP 98304:HjBPOkyoS6awkadkjEsLAxdzSiZdWKyZgij3gLxt5FNn2Wcsz/ZoTLQ3E4nQi9u2:HEk/S64skwXZ50M+3gL5FZ2WO4p7
- TLSH T1D1474907FA954AEACA6982358CAA43853770FC482F16A7C72A14F63C7D733D56DB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_65ecbb8ae9f19e03c93f1b6dbd9137b4_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_65ecbb8ae9f19e03c93f1b6dbd9137b4_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_65ecbb8ae9f19e03c93f1b6dbd9137b4_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 23.5MB
- SHA256 2677ca48cb154022336de47bd8a4852a9768e775c8a72134645685976dd523b0
- MD5 65ecbb8ae9f19e03c93f1b6dbd9137b4
- SHA1 4ef465b47420c4a54091e74fee0fcadd5011bb6d
- SHA512 70562878ce8768db192a6b9f4476292563f7997495d0edd3aabf3971b8cfec92c5ad602664d2e0fd61f4f8f7fdd896ada5206e586187df5d5053978684fa3247
- SSDEEP 98304:HjBPOkyoS6awkadkjEsLAxdzSiZdWKyZgij3gLxt5FNn2Wcsz/ZoTLQ3E4nQi9u2:HEk/S64skwXZ50M+3gL5FZ2WO4p7
- TLSH T1D1474907FA954AEACA6982358CAA43853770FC482F16A7C72A14F63C7D733D56DB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.