General
- Target 2026-05-29_af9eecc44eb05a8a4136fee24d550c32_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260529-e3lw1ac12w
- SHA256 5e6d8e6b7ada94c7eeca7c8000547ad46e450eb8676f61afb4d68089fa66b630
- MD5 af9eecc44eb05a8a4136fee24d550c32
- SHA1 73c41e6ef02f00c3cae250f2508e99844ac61697
- SHA512 9b7ae654222dca4d9e798e625f8314c889ede2f03a6c5b8f52e2458be168db8f5843ce54ef5e0af3373bf976cce4ce4b541f587406586d08b79c2d0f663396e1
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ0:8vWfKg78HIVX+vQ0
- TLSH T1CF262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_af9eecc44eb05a8a4136fee24d550c32_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_af9eecc44eb05a8a4136fee24d550c32_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_af9eecc44eb05a8a4136fee24d550c32_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 5e6d8e6b7ada94c7eeca7c8000547ad46e450eb8676f61afb4d68089fa66b630
- MD5 af9eecc44eb05a8a4136fee24d550c32
- SHA1 73c41e6ef02f00c3cae250f2508e99844ac61697
- SHA512 9b7ae654222dca4d9e798e625f8314c889ede2f03a6c5b8f52e2458be168db8f5843ce54ef5e0af3373bf976cce4ce4b541f587406586d08b79c2d0f663396e1
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ0:8vWfKg78HIVX+vQ0
- TLSH T1CF262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application