General
- Target 2026-07-01_d3c2969c1178c4abc7daf9f102c80be4_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat
- Size 4.0MB
- Sample260701-jc2a8abs4t
- SHA256 6fbae9259cb60d83892aa451201475f3984593c5605f310e117452237933a558
- MD5 d3c2969c1178c4abc7daf9f102c80be4
- SHA1 403b287a4e6f7c419ef3c85cd1b2029b7f62d51a
- SHA512 797e0ee145cf469c0633d3cf1498213241343a578f3726330c98765cf90d4efbec8c7df20f15fe8f6002434dee798f4d9f4a0b840baa6283a20e029a02be8222
- SSDEEP 49152:lKKfHPZ6IVMv76K8ocsCGzzJ7UDv7zuBcLAqw1Gjg+A2deCMmwV/vJu2mWG2mrk:l/fh6ImzzJoDfuBcMv+A73XA
- TLSH T1E1166B51FEDB94F5EA035A3045A7A37F6330A6098335CBC3CA405FA6E957AD21A33217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_d3c2969c1178c4abc7daf9f102c80be4_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_d3c2969c1178c4abc7daf9f102c80be4_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_d3c2969c1178c4abc7daf9f102c80be4_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat
- Size 4.0MB
- SHA256 6fbae9259cb60d83892aa451201475f3984593c5605f310e117452237933a558
- MD5 d3c2969c1178c4abc7daf9f102c80be4
- SHA1 403b287a4e6f7c419ef3c85cd1b2029b7f62d51a
- SHA512 797e0ee145cf469c0633d3cf1498213241343a578f3726330c98765cf90d4efbec8c7df20f15fe8f6002434dee798f4d9f4a0b840baa6283a20e029a02be8222
- SSDEEP 49152:lKKfHPZ6IVMv76K8ocsCGzzJ7UDv7zuBcLAqw1Gjg+A2deCMmwV/vJu2mWG2mrk:l/fh6ImzzJoDfuBcMv+A73XA
- TLSH T1E1166B51FEDB94F5EA035A3045A7A37F6330A6098335CBC3CA405FA6E957AD21A33217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.