General
- Target 2026-05-29_2315f7cd48c8e9461648fa5309292b8b_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260529-tkrf4agt5x
- SHA256 5c442b9c7166dd9ad72078dd6f3904840f64d67f3c9d353145949835c4dc4979
- MD5 2315f7cd48c8e9461648fa5309292b8b
- SHA1 23917c4bd9e673313f4a2cf1d6ffc0df7ab2ad6f
- SHA512 54f6cc02819f5600f5724b19d0a08ff21aafef323175d68748136536c74a6f2a3996538e2bbeb3f8fea57874fba5c96c5844ff84a67babdae689bbab96e5d454
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQC:8vWfKg78HIVX+vQC
- TLSH T1A3262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_2315f7cd48c8e9461648fa5309292b8b_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_2315f7cd48c8e9461648fa5309292b8b_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_2315f7cd48c8e9461648fa5309292b8b_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 5c442b9c7166dd9ad72078dd6f3904840f64d67f3c9d353145949835c4dc4979
- MD5 2315f7cd48c8e9461648fa5309292b8b
- SHA1 23917c4bd9e673313f4a2cf1d6ffc0df7ab2ad6f
- SHA512 54f6cc02819f5600f5724b19d0a08ff21aafef323175d68748136536c74a6f2a3996538e2bbeb3f8fea57874fba5c96c5844ff84a67babdae689bbab96e5d454
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQC:8vWfKg78HIVX+vQC
- TLSH T1A3262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application