General
- Target 2026-05-27_f8123bfc0bd9ffe8b6cb0f2b1053404d_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260527-mhvbmsdw2y
- SHA256 17a27d1fe67e6b076d1a081a69a2d286129b1aa9543622d1843882da5cda9ba5
- MD5 f8123bfc0bd9ffe8b6cb0f2b1053404d
- SHA1 216390034146c2bee3743348f07fd9fddc3f6e83
- SHA512 6f59c89cb776797d4b1498d595241b54b17808ce0ff171502805a35b7a1eb8005c039bf8660b95c0f0766c403481c145ca041e076528efcc1cecf45cc7a10aaa
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQD:8vWfKg78HIVX+vQD
- TLSH T177262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-27_f8123bfc0bd9ffe8b6cb0f2b1053404d_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_f8123bfc0bd9ffe8b6cb0f2b1053404d_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_f8123bfc0bd9ffe8b6cb0f2b1053404d_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 17a27d1fe67e6b076d1a081a69a2d286129b1aa9543622d1843882da5cda9ba5
- MD5 f8123bfc0bd9ffe8b6cb0f2b1053404d
- SHA1 216390034146c2bee3743348f07fd9fddc3f6e83
- SHA512 6f59c89cb776797d4b1498d595241b54b17808ce0ff171502805a35b7a1eb8005c039bf8660b95c0f0766c403481c145ca041e076528efcc1cecf45cc7a10aaa
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQD:8vWfKg78HIVX+vQD
- TLSH T177262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application