2026-03-09_576bfe562fc355f8cd6dbff6b6ae488f_cobalt-strike_coinminer_hive_luca-stealer
Classification: Malicious
2026-03-09_576bfe562fc355f8cd6dbff6b6ae488f_cobalt-strike_coinminer_hive_luca-stealer is a ransomware. Detected by 52 antivirus engines.
Detection summary
- 52 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: BLACKBYTE (G1043)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Blackbyte | Triage | 2026-03-09 03:04:00 | 2026-03-09 03:04:00 | malicious-activity | G1043 BlackByte |
Tags
blackbyteSample information
- Filenames
- 2026-03-09_576bfe562fc355f8cd6dbff6b6ae488f_cobalt-strike_coinminer_hive_luca-stealer
- MD5
576bfe562fc355f8cd6dbff6b6ae488f- SHA-1
26c55e45fa7a2e671181c3c5099d47d103938260- SHA-256
49aa2a6001fde37bd2a4c31be728f781b1bfe033c77bc8ae451ce69cc7f64cf1- SHA-512
a8f7d6fc99cc3e01dfc7d63d986de2c5a2e8b06d7a6745dabace3fe9656f76c299eb35b71206f48524564f69689b0e860a5e57794704b4d33886480bae65040d- First indexed
- 2026-03-09 03:04:00
- Last updated
- 2026-10-14 00:23:33
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Ransom.BlackByte.11 |
| APEX | Malicious |
| AVG | Win64:MalwareX-gen [Misc] |
| AhnLab-V3 | Trojan/Win.Generic.R475252 |
| Alibaba | Ransom:Win64/BlackByte.c4541cae |
| Antiy-AVL | Trojan/Win32.Sabsik |
| Arcabit | Trojan.Ransom.BlackByte.11 |
| Avast | Win64:MalwareX-gen [Misc] |
| Avira | TR/W64.Agent |
| BitDefender | Gen:Variant.Ransom.BlackByte.11 |
| Bkav | W32.Malware.26DF5300 |
| CTX | exe.trojan.blackbyte |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | WinGo/Filecoder.BlackByte.A trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Ransom.BlackByte.11 (B) |
| F-Secure | Trojan.TR/W64.Agent |
| Fortinet | W64/Agent.CH!tr |
| GData | Gen:Variant.Ransom.BlackByte.11 |
| Detected | |
| Jiangmin | Trojan.Blackbyte.b |
| K7AntiVirus | Ransomware ( 006d62701 ) |
| K7GW | Ransomware ( 006d62701 ) |
| Kaspersky | Trojan-Ransom.Win64.Blackbyte.d |
| Kingsoft | Win32.Trojan-Ransom.Generic.a |
| Lionic | Trojan.Win32.Blackbyte.j!c |
| MaxSecure | Trojan.Malware.336894787.susgen |
| McAfeeD | ti!49AA2A6001FD |
| MicroWorld-eScan | Gen:Variant.Ransom.BlackByte.11 |
| Microsoft | Ransom:Win64/BlackByte.GB!MTB |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Ransom.BlackByte!1.DC06 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Suspicious PE |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Ransom/W64.Agent.3912192 |
| Tencent | Malware.Win32.Gencirc.10bde942 |
| Trapmine | malicious.moderate.ml.score |
| TrellixENS | Artemis!576BFE562FC3 |
| TrendMicro | Ransom.Win64.BLACKBYTE.SMAJC |
| TrendMicro-HouseCall | Ransom.Win64.BLACKBYTE.SMAJC |
| VIPRE | Gen:Variant.Ransom.BlackByte.11 |
| Varist | W64/BlackByte.A.gen!Eldorado |
| Yandex | Trojan.Blackbyte!Bl0/cscqsXA |
| Zillya | Trojan.Agent.Win32.2527352 |
| alibabacloud | Ransomware:Multi/BlackByte.31adaf5d |
| huorong | HEUR:Trojan/Injector.bit |