General
- Target 2026-07-12_d66ddb34dd53b7da44cd1099063479c5_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260712-xrhdjsfx6r
- SHA256 74542a6e5105b47ec9dae0b93fa8e4cbe8f237c67b44c18dbab23c0ca14861ca
- MD5 d66ddb34dd53b7da44cd1099063479c5
- SHA1 1ea4238e1149098b00d69ddac1b953ac43caaf65
- SHA512 bba8a02149ebb8b195319c091d0aa2938161979e999cd06cbb03a01809aa52e0a49ba642326c9facf04eb6d846b63fc64bc3c6828f1c5d25c36778c40e53b587
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ/:8vWfKg78HIVX+vQ/
- TLSH T128262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_d66ddb34dd53b7da44cd1099063479c5_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_d66ddb34dd53b7da44cd1099063479c5_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_d66ddb34dd53b7da44cd1099063479c5_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 74542a6e5105b47ec9dae0b93fa8e4cbe8f237c67b44c18dbab23c0ca14861ca
- MD5 d66ddb34dd53b7da44cd1099063479c5
- SHA1 1ea4238e1149098b00d69ddac1b953ac43caaf65
- SHA512 bba8a02149ebb8b195319c091d0aa2938161979e999cd06cbb03a01809aa52e0a49ba642326c9facf04eb6d846b63fc64bc3c6828f1c5d25c36778c40e53b587
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ/:8vWfKg78HIVX+vQ/
- TLSH T128262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application