General
- Target 2026-11-06_db47a57cd635d5101429056905e080ab_cobalt-strike_coinminer_dosia_frostygoop_glassworm_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver
- Size 9.5MB
- Sample261107-1eapqa1z3l
- SHA256 eb8e4753e0356187797a4fd18c7d54436434b0119a7edd0f173a05aca16b2c6d
- MD5 db47a57cd635d5101429056905e080ab
- SHA1 19c09b56653bece23a6b57754b9b623911d96265
- SHA512 518ebe10c510aca171e8f03162499b592b13d1ebdf171c6c240053321d12b6ffcc7c6bdaf16e6cbdf2e37eaeabd96b679b25140b121e2bb9f1ec36b8e7f7cde6
- SSDEEP 98304:EUSthVyTWiOaeNmTRzmEnLwuILE+XacyevI2+nw0eTO:EraTWiOaeq6G+XacyevI2+nwk
- TLSH T1C6A62907F89581E8C599D174C6259263FA707C889B3473D36B60F6B42F73BD0AABA314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-06_db47a57cd635d5101429056905e080ab_cobalt-strike_coinminer_dosia_frostygoop_glassworm_luca-.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_db47a57cd635d5101429056905e080ab_cobalt-strike_coinminer_dosia_frostygoop_glassworm_luca-.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_db47a57cd635d5101429056905e080ab_cobalt-strike_coinminer_dosia_frostygoop_glassworm_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver
- Size 9.5MB
- SHA256 eb8e4753e0356187797a4fd18c7d54436434b0119a7edd0f173a05aca16b2c6d
- MD5 db47a57cd635d5101429056905e080ab
- SHA1 19c09b56653bece23a6b57754b9b623911d96265
- SHA512 518ebe10c510aca171e8f03162499b592b13d1ebdf171c6c240053321d12b6ffcc7c6bdaf16e6cbdf2e37eaeabd96b679b25140b121e2bb9f1ec36b8e7f7cde6
- SSDEEP 98304:EUSthVyTWiOaeNmTRzmEnLwuILE+XacyevI2+nw0eTO:EraTWiOaeq6G+XacyevI2+nwk
- TLSH T1C6A62907F89581E8C599D174C6259263FA707C889B3473D36B60F6B42F73BD0AABA314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Suspicious use of SetThreadContext