General
- Target 2026-09-13_3c76c27d3d10663e33c0b5693997e376_cobalt-strike_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat
- Size 8.3MB
- Sample260913-tlgchsak2s
- SHA256 58e195b5aa8232d1cbbe5d7eb782e2b0a70e884ed64b66a2d3d25509a99e01d1
- MD5 3c76c27d3d10663e33c0b5693997e376
- SHA1 ddd7a5dbcc25ead78bfb8449d6244b5c838af7c5
- SHA512 3b30b7de649aa1ba54122aa8e07cac83d18fec50c9bea1a139b9ea29b24afeb980178b613a491ead8c3f55095300e4f6a0eb43f851b4707d1d26e0685df8e4c6
- SSDEEP 49152:a6u0NXPgNrb/T2vO90dL3BmAFd4A64nsfJHd8w0h6LMDyV4vT3t4LbQaH2NYG9VV:FM0mercWvxYIwPEycJXvL663R
- TLSH T118963A43F86181A4C1A9D175CA66C293BA703C894F3063D37B50FBBA2F76BD46A79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-13_3c76c27d3d10663e33c0b5693997e376_cobalt-strike_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_3c76c27d3d10663e33c0b5693997e376_cobalt-strike_coinminer_dosia_glassworm_luca-stealer_poet-rat_quasar-rat
- Size 8.3MB
- SHA256 58e195b5aa8232d1cbbe5d7eb782e2b0a70e884ed64b66a2d3d25509a99e01d1
- MD5 3c76c27d3d10663e33c0b5693997e376
- SHA1 ddd7a5dbcc25ead78bfb8449d6244b5c838af7c5
- SHA512 3b30b7de649aa1ba54122aa8e07cac83d18fec50c9bea1a139b9ea29b24afeb980178b613a491ead8c3f55095300e4f6a0eb43f851b4707d1d26e0685df8e4c6
- SSDEEP 49152:a6u0NXPgNrb/T2vO90dL3BmAFd4A64nsfJHd8w0h6LMDyV4vT3t4LbQaH2NYG9VV:FM0mercWvxYIwPEycJXvL663R
- TLSH T118963A43F86181A4C1A9D175CA66C293BA703C894F3063D37B50FBBA2F76BD46A79314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting