General
- Target 2026-08-27_8edad34fdc0e1b0bfad0ca2dd04ff7e1_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver
- Size 16.7MB
- Sample260827-p6nvwaveld
- SHA256 1970e5aa3c16cffdf1669ad6aa5057b4f422b804231851fec24f39d444a53552
- MD5 8edad34fdc0e1b0bfad0ca2dd04ff7e1
- SHA1 e477ea2b78af9d4a355601659c15842470c25200
- SHA512 7cde62196e28407ad54b85d618330783691af4bab85d3e4910a8ad737c8073371b18b8138bdc6b1ea5922b96306a2847b73c9324563615e03e25c21e457cdd7b
- SSDEEP 98304:5HhoYabW3Tk5asigKXTwXG9A2+V18Bzt35p+OENp4lt7cQdokZ2XKZ36yUxh+JlV:bRq5zveA58B9yrz4PbdoKQyUxh+/L7p
- TLSH T10C078C43F854D5E4C6EDC170C97A8252BA71B448473D77C72B20AA762B63BC46BBB390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_8edad34fdc0e1b0bfad0ca2dd04ff7e1_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_gla.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_8edad34fdc0e1b0bfad0ca2dd04ff7e1_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_gla.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_8edad34fdc0e1b0bfad0ca2dd04ff7e1_cobalt-strike_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver
- Size 16.7MB
- SHA256 1970e5aa3c16cffdf1669ad6aa5057b4f422b804231851fec24f39d444a53552
- MD5 8edad34fdc0e1b0bfad0ca2dd04ff7e1
- SHA1 e477ea2b78af9d4a355601659c15842470c25200
- SHA512 7cde62196e28407ad54b85d618330783691af4bab85d3e4910a8ad737c8073371b18b8138bdc6b1ea5922b96306a2847b73c9324563615e03e25c21e457cdd7b
- SSDEEP 98304:5HhoYabW3Tk5asigKXTwXG9A2+V18Bzt35p+OENp4lt7cQdokZ2XKZ36yUxh+JlV:bRq5zveA58B9yrz4PbdoKQyUxh+/L7p
- TLSH T10C078C43F854D5E4C6EDC170C97A8252BA71B448473D77C72B20AA762B63BC46BBB390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext