General
- Target 2026-07-12_efa9276bd029358aa26242dca827ef3b_cobalt-strike_coinminer_glassworm_poet-rat
- Size 7.0MB
- Sample260712-j1bepsgs91
- SHA256 267a0893b2674dc64daeb1b2cd8f7ff6f821162adf44e8bd4d1898891aa854fd
- MD5 efa9276bd029358aa26242dca827ef3b
- SHA1 9eb372cc432fc1bbccf09223a22ae3e754d07167
- SHA512 dd8f72295e5b6005ac1495905dce222bd8bbb5dcfba2a35ea416df2345d5f1429aa047cefba4f31eee8334cd69149fec40549d8f1857f8d915c588b49d23a594
- SSDEEP 98304:Qwmsy5q1SGkDwVBTwPwyPQfQCTppUUjXISDchReSDchRO:VmD5q1SGs2y7QNTpWLhR4hRO
- TLSH T1F2768D33F9E614EAC6BEE170C15253227E713CA743317B975F80569A1A62BD4BE2E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_efa9276bd029358aa26242dca827ef3b_cobalt-strike_coinminer_glassworm_poet-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_efa9276bd029358aa26242dca827ef3b_cobalt-strike_coinminer_glassworm_poet-rat.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_efa9276bd029358aa26242dca827ef3b_cobalt-strike_coinminer_glassworm_poet-rat
- Size 7.0MB
- SHA256 267a0893b2674dc64daeb1b2cd8f7ff6f821162adf44e8bd4d1898891aa854fd
- MD5 efa9276bd029358aa26242dca827ef3b
- SHA1 9eb372cc432fc1bbccf09223a22ae3e754d07167
- SHA512 dd8f72295e5b6005ac1495905dce222bd8bbb5dcfba2a35ea416df2345d5f1429aa047cefba4f31eee8334cd69149fec40549d8f1857f8d915c588b49d23a594
- SSDEEP 98304:Qwmsy5q1SGkDwVBTwPwyPQfQCTppUUjXISDchReSDchRO:VmD5q1SGs2y7QNTpWLhR4hRO
- TLSH T1F2768D33F9E614EAC6BEE170C15253227E713CA743317B975F80569A1A62BD4BE2E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)
-
Drops file in System32 directory