General
- Target 2026-07-13_b94537b01fb9f74fc219c9fd4f8ef341_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260714-a3sbkabw4p
- SHA256 2a7ae0bb6cd393b83ffc2df4eda6a37a99d02089b6995f3bcc3902d3ed9ffa15
- MD5 b94537b01fb9f74fc219c9fd4f8ef341
- SHA1 eb06e3fa51cb47d7b75ff4380872e723870a75dc
- SHA512 0618c1a0816d8e31463da907f17d33746c4e824bc3d5fb47a2b058ab624b5616001bca122bb6277bcafb521900e290e612dd53e65d7c7920625ea11366dabb83
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ9:8vWfKg78HIVX+vQ9
- TLSH T12E262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_b94537b01fb9f74fc219c9fd4f8ef341_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_b94537b01fb9f74fc219c9fd4f8ef341_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_b94537b01fb9f74fc219c9fd4f8ef341_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 2a7ae0bb6cd393b83ffc2df4eda6a37a99d02089b6995f3bcc3902d3ed9ffa15
- MD5 b94537b01fb9f74fc219c9fd4f8ef341
- SHA1 eb06e3fa51cb47d7b75ff4380872e723870a75dc
- SHA512 0618c1a0816d8e31463da907f17d33746c4e824bc3d5fb47a2b058ab624b5616001bca122bb6277bcafb521900e290e612dd53e65d7c7920625ea11366dabb83
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ9:8vWfKg78HIVX+vQ9
- TLSH T12E262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application