General
- Target 2026-07-13_0f639dd566baba974551b71867197193_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260713-29pmsscx31
- SHA256 c864980de291d8fc8e464ea4152af37505fb095c3d1ad1fa710350dcaf7cef91
- MD5 0f639dd566baba974551b71867197193
- SHA1 4adcd4f3fbc1dabc46a0e1efb5dd21646dba6354
- SHA512 51cc116e91b8b886cc06fcd5e18c13e10f7fd9728f6b6e27063aa90a837c0b71cde0acccfd7783ab00e35f030373a87f1126d2cffd3e86ceaa494626d91d7761
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ5:8vWfKg78HIVX+vQ5
- TLSH T109262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_0f639dd566baba974551b71867197193_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_0f639dd566baba974551b71867197193_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_0f639dd566baba974551b71867197193_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 c864980de291d8fc8e464ea4152af37505fb095c3d1ad1fa710350dcaf7cef91
- MD5 0f639dd566baba974551b71867197193
- SHA1 4adcd4f3fbc1dabc46a0e1efb5dd21646dba6354
- SHA512 51cc116e91b8b886cc06fcd5e18c13e10f7fd9728f6b6e27063aa90a837c0b71cde0acccfd7783ab00e35f030373a87f1126d2cffd3e86ceaa494626d91d7761
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ5:8vWfKg78HIVX+vQ5
- TLSH T109262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application