General
- Target 2026-09-12_36e9b5ef14346f51d5246f6dd5fe5ff2_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 10.0MB
- Sample260913-d526bss1fv
- SHA256 e0727a8e2c4e11ae37d02cce97eff82fdbab4fc2037cf2867c372aec7d487105
- MD5 36e9b5ef14346f51d5246f6dd5fe5ff2
- SHA1 7816b2991a4a58090424a2e15e4f3f113e39f0ae
- SHA512 c635050f7e76839b23f64a1486514961e4aa80c11b3dd72874842617330b4bc4c5ec134e7d79011b83d3568f8f87bbe29e86a7adccfc23c7ef79c7089415d52f
- SSDEEP 98304:rmPUf5A91QP5oToUsbeRwcyHekFeSpc12EKw+KVktWHBLmpTN5huJd3kMerGpNT0:aqqQP5oKswpLi3gOWt
- TLSH T1C4B65C47E99241E8C4AAD1308667A273BA307C151B2467E72B90F7382F77FD05EBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_36e9b5ef14346f51d5246f6dd5fe5ff2_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_36e9b5ef14346f51d5246f6dd5fe5ff2_cobalt-strike_coinminer_dosia_elex_glassworm_luca-steale.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_36e9b5ef14346f51d5246f6dd5fe5ff2_cobalt-strike_coinminer_dosia_elex_glassworm_luca-stealer_poet-rat_quasar-rat_swisyn_wannacry
- Size 10.0MB
- SHA256 e0727a8e2c4e11ae37d02cce97eff82fdbab4fc2037cf2867c372aec7d487105
- MD5 36e9b5ef14346f51d5246f6dd5fe5ff2
- SHA1 7816b2991a4a58090424a2e15e4f3f113e39f0ae
- SHA512 c635050f7e76839b23f64a1486514961e4aa80c11b3dd72874842617330b4bc4c5ec134e7d79011b83d3568f8f87bbe29e86a7adccfc23c7ef79c7089415d52f
- SSDEEP 98304:rmPUf5A91QP5oToUsbeRwcyHekFeSpc12EKw+KVktWHBLmpTN5huJd3kMerGpNT0:aqqQP5oKswpLi3gOWt
- TLSH T1C4B65C47E99241E8C4AAD1308667A273BA307C151B2467E72B90F7382F77FD05EBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory