General
- Target 2026-08-02_75bf7ea99c47e99d82cb2ea65e2a82bf_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260802-kd2ttawvet
- SHA256 9ea77bba1654b481b9caefc01b2e03881c7bed364db64031ae29a49c1bd69387
- MD5 75bf7ea99c47e99d82cb2ea65e2a82bf
- SHA1 140596f699bfd204a19d31d4a99905988237b370
- SHA512 fc076d8994638986593b60f99007f7871b3c459d96f975b051089199cf7049ae8ab718e9d59e7967b897c2fe313bd4feaab00025eeb4041a58504d8da2967703
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQy:8vWfKg78HIVX+vQy
- TLSH T155262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_75bf7ea99c47e99d82cb2ea65e2a82bf_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_75bf7ea99c47e99d82cb2ea65e2a82bf_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_75bf7ea99c47e99d82cb2ea65e2a82bf_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 9ea77bba1654b481b9caefc01b2e03881c7bed364db64031ae29a49c1bd69387
- MD5 75bf7ea99c47e99d82cb2ea65e2a82bf
- SHA1 140596f699bfd204a19d31d4a99905988237b370
- SHA512 fc076d8994638986593b60f99007f7871b3c459d96f975b051089199cf7049ae8ab718e9d59e7967b897c2fe313bd4feaab00025eeb4041a58504d8da2967703
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQy:8vWfKg78HIVX+vQy
- TLSH T155262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application