General
- Target 2026-07-03_bf771af8ab3c3e7289d6bed9084d2674_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260703-pff3cady4k
- SHA256 90037bc89a81670437a23bd3be15af8aa7eef49ce49fccdedd747bc7c783cd45
- MD5 bf771af8ab3c3e7289d6bed9084d2674
- SHA1 99fc2137988c07ff263b1d3ef1cd75c729552270
- SHA512 412db0c60d63999903b64bcc048186d5f5a9e10e3802e217a056ada338ce4ff875395a77ca3997fde010b0c330e0c5e0041376089f79db56af44c00571171542
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ7:8vWfKg78HIVX+vQ7
- TLSH T121262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_bf771af8ab3c3e7289d6bed9084d2674_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_bf771af8ab3c3e7289d6bed9084d2674_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_bf771af8ab3c3e7289d6bed9084d2674_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 90037bc89a81670437a23bd3be15af8aa7eef49ce49fccdedd747bc7c783cd45
- MD5 bf771af8ab3c3e7289d6bed9084d2674
- SHA1 99fc2137988c07ff263b1d3ef1cd75c729552270
- SHA512 412db0c60d63999903b64bcc048186d5f5a9e10e3802e217a056ada338ce4ff875395a77ca3997fde010b0c330e0c5e0041376089f79db56af44c00571171542
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ7:8vWfKg78HIVX+vQ7
- TLSH T121262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application