General
- Target 2026-07-12_ada4681f8f19de53561a83016db67b9d_cobalt-strike_coinminer_glassworm_poet-rat
- Size 7.0MB
- Sample260712-n5t5tsht3p
- SHA256 34e83df5b353e465580a9974dc5725a7ffce37cf6d41e975f6322a920dc4a328
- MD5 ada4681f8f19de53561a83016db67b9d
- SHA1 0285cdf54f7ae3d81f9cc73c28076fef7f60249c
- SHA512 fb71e04a5768eea73b277319e63a8a605cb68b10f589f2ba86ca33f673759d3129667ac1236e218b955da56e324a6d53cc4ae3d158eb61406c94e72cd7647d3b
- SSDEEP 98304:Qwmsy5q1SGkDwVBTwPwyPQfQCTppUUjXISDchReSDchR5:VmD5q1SGs2y7QNTpWLhR4hR5
- TLSH T1C3768D33F9E614EAC6BEE170C15253227E713CA743317B975F80569A1A62BD4BE2E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_ada4681f8f19de53561a83016db67b9d_cobalt-strike_coinminer_glassworm_poet-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_ada4681f8f19de53561a83016db67b9d_cobalt-strike_coinminer_glassworm_poet-rat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_ada4681f8f19de53561a83016db67b9d_cobalt-strike_coinminer_glassworm_poet-rat
- Size 7.0MB
- SHA256 34e83df5b353e465580a9974dc5725a7ffce37cf6d41e975f6322a920dc4a328
- MD5 ada4681f8f19de53561a83016db67b9d
- SHA1 0285cdf54f7ae3d81f9cc73c28076fef7f60249c
- SHA512 fb71e04a5768eea73b277319e63a8a605cb68b10f589f2ba86ca33f673759d3129667ac1236e218b955da56e324a6d53cc4ae3d158eb61406c94e72cd7647d3b
- SSDEEP 98304:Qwmsy5q1SGkDwVBTwPwyPQfQCTppUUjXISDchReSDchR5:VmD5q1SGs2y7QNTpWLhR4hR5
- TLSH T1C3768D33F9E614EAC6BEE170C15253227E713CA743317B975F80569A1A62BD4BE2E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)
-
Drops file in System32 directory