2026-06-11_fd87766630ca08e71ddadd2c823b88a2_cobalt-strike_coinminer_luca-stealer
Classification: Malicious
2026-06-11_fd87766630ca08e71ddadd2c823b88a2_cobalt-strike_coinminer_luca-stealer is a malicious file sample. Linked to Blackbyte activity.
Detection summary
- 48 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: BLACKBYTE (G1043)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Blackbyte | Triage | 2026-06-11 19:08:44 | 2026-06-11 19:08:44 | malicious-activity | G1043 BlackByte |
Tags
blackbyte ransomwareSample information
- Filenames
- 2026-06-11_fd87766630ca08e71ddadd2c823b88a2_cobalt-strike_coinminer_luca-stealer
- SHA-256
31f4f1c3ca961b9ab68343e35fb2f66fa964f6cec22dbd8871e9dcb5562c20b6- First indexed
- 2026-06-11 19:08:44
- Last updated
- 2026-07-15 02:08:56
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Agent.FTPB |
| APEX | Malicious |
| AVG | Win64:MalwareX-gen [Ransom] |
| AhnLab-V3 | Ransomware/Win.BlackByte.R455522 |
| Antiy-AVL | Trojan/Win32.Agent |
| Arcabit | Trojan.Agent.FTPB |
| Avast | Win64:MalwareX-gen [Ransom] |
| Avira | TR/W64.MalwareX |
| BitDefender | Trojan.Agent.FTPB |
| Bkav | W32.Malware.E154CFBE |
| CAT-QuickHeal | Ransom.BlackByte.S27988639 |
| CTX | exe.trojan.ftpb |
| ClamAV | Win.Ransomware.Ransomware-10059712-0 |
| CrowdStrike | win/malicious_confidence_60% (W) |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Ransom.813 |
| ESET-NOD32 | WinGo/Filecoder.BlackByte.A trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.Agent.FTPB (B) |
| F-Secure | Trojan.TR/W64.MalwareX |
| Fortinet | W64/Agent.CH!tr |
| GData | Trojan.Agent.FTPB |
| Detected | |
| Gridinsoft | Trojan.Win64.Wacatac.oa!s1 |
| Jiangmin | Trojan.Generic.hiyqj |
| K7AntiVirus | Ransomware ( 005ce14b1 ) |
| K7GW | Ransomware ( 005ce14b1 ) |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Generic |
| Lionic | Trojan.Win32.Generic.j!c |
| Malwarebytes | Malware.AI.1838534881 |
| MaxSecure | Trojan.Malware.121218.susgen |
| McAfeeD | ti!31F4F1C3CA96 |
| MicroWorld-eScan | Trojan.Agent.FTPB |
| Microsoft | Ransom:Win64/BlackByte.GB!MTB |
| Panda | Trj/GdSda.A |
| Rising | Trojan.Kryptik/x64!1.129CA (CLASSIC) |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.10bda278 |
| TrellixENS | GenericRXAA-AA!FD87766630CA |
| TrendMicro | Ransom.Win64.BLACKBYTE.SMAJC |
| TrendMicro-HouseCall | Ransom.Win64.BLACKBYTE.SMAJC |
| VIPRE | Trojan.Agent.FTPB |
| Varist | W64/Filecoder.OM.gen!Eldorado |
| Webroot | W32.Trojan.Gen |
| Zillya | Trojan.Agent.Win32.2582625 |
| huorong | Ransom/BlackByte.a |