General
- Target 2026-06-25_c6d949358970597437ace520df17836c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260629-ym3dlad18t
- SHA256 8d06b64a4590d065cc0b2efd9427070dc559b6828579d4633e87a36c95305b77
- MD5 c6d949358970597437ace520df17836c
- SHA1 6f063e6c802bfe00da162af631cfc32a1833d278
- SHA512 60c6d5d1e9454845797c135c9c94c07a1346b8a13effdd8934ac4e25d5ee4fd8eaf0623da3fc3f368465e79161c171f4b63deb1102b3f9eb24bc5d7c497d83bc
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ8:8vWfKg78HIVX+vQ8
- TLSH T183262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_c6d949358970597437ace520df17836c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_c6d949358970597437ace520df17836c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_c6d949358970597437ace520df17836c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 8d06b64a4590d065cc0b2efd9427070dc559b6828579d4633e87a36c95305b77
- MD5 c6d949358970597437ace520df17836c
- SHA1 6f063e6c802bfe00da162af631cfc32a1833d278
- SHA512 60c6d5d1e9454845797c135c9c94c07a1346b8a13effdd8934ac4e25d5ee4fd8eaf0623da3fc3f368465e79161c171f4b63deb1102b3f9eb24bc5d7c497d83bc
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ8:8vWfKg78HIVX+vQ8
- TLSH T183262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application