General
- Target 2026-09-10_3f1c6c891bfd5838d1c253af0e6d47c7_cobalt-strike_coinminer_ghostlocker_glassworm_luca-stealer
- Size 21.2MB
- Sample260910-wcllzstbmb
- SHA256 f575d3d7cc87762edf67c8ebb159e9c0273df29c296d80100b7e74700843ea0d
- MD5 3f1c6c891bfd5838d1c253af0e6d47c7
- SHA1 0dfe8d00f4ad8a3ce12af7bc085309e5866728f8
- SHA512 8b72e66746b5527a198a5c966e2df23b198bd4f9c0d3ff992ab6e155691785320f4e92d64a909230dbb9e1912d6721f3b4489e0eade151c26bf3a2e3813460ea
- SSDEEP 98304:O3eizj2+fPVg9DLCC/uK+Q3UScTU2p0XloVsFFBqpDJ5NspfQDRLPliPTafuPj+q:G9uMaoC/uKbpRWrV0rqppmSlWurq
- TLSH T1C4274942B7894ADED6509A39CAAA13823370FC105F27E7D7AB45B23D3C726C59EB4701
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-10_3f1c6c891bfd5838d1c253af0e6d47c7_cobalt-strike_coinminer_ghostlocker_glassworm_luca-stealer.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_3f1c6c891bfd5838d1c253af0e6d47c7_cobalt-strike_coinminer_ghostlocker_glassworm_luca-stealer.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_3f1c6c891bfd5838d1c253af0e6d47c7_cobalt-strike_coinminer_ghostlocker_glassworm_luca-stealer
- Size 21.2MB
- SHA256 f575d3d7cc87762edf67c8ebb159e9c0273df29c296d80100b7e74700843ea0d
- MD5 3f1c6c891bfd5838d1c253af0e6d47c7
- SHA1 0dfe8d00f4ad8a3ce12af7bc085309e5866728f8
- SHA512 8b72e66746b5527a198a5c966e2df23b198bd4f9c0d3ff992ab6e155691785320f4e92d64a909230dbb9e1912d6721f3b4489e0eade151c26bf3a2e3813460ea
- SSDEEP 98304:O3eizj2+fPVg9DLCC/uK+Q3UScTU2p0XloVsFFBqpDJ5NspfQDRLPliPTafuPj+q:G9uMaoC/uKbpRWrV0rqppmSlWurq
- TLSH T1C4274942B7894ADED6509A39CAAA13823370FC105F27E7D7AB45B23D3C726C59EB4701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
An open source browser data exporter written in golang.
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers