General
- Target 2026-08-02_c164ccca993ba6ceb8af298b121b07d0_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260802-vgpc1ach86
- SHA256 49aba1b99a5fcb4780295981a9d4bc030abd62991bd36cb4f384c8cb4789fb8f
- MD5 c164ccca993ba6ceb8af298b121b07d0
- SHA1 33e567b796e0c61e27dffaae07c0906e52c29170
- SHA512 bd7b8a35864cb2c3ca41f91d97b4ece831784891c15ba254bd68a0071d5d7db75a569fe0e7c1036bc71b43a9cc89f05e296ffb6c11b2a6a99ec91c55856c00e7
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQS:8vWfKg78HIVX+vQS
- TLSH T18D262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_c164ccca993ba6ceb8af298b121b07d0_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_c164ccca993ba6ceb8af298b121b07d0_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c164ccca993ba6ceb8af298b121b07d0_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 49aba1b99a5fcb4780295981a9d4bc030abd62991bd36cb4f384c8cb4789fb8f
- MD5 c164ccca993ba6ceb8af298b121b07d0
- SHA1 33e567b796e0c61e27dffaae07c0906e52c29170
- SHA512 bd7b8a35864cb2c3ca41f91d97b4ece831784891c15ba254bd68a0071d5d7db75a569fe0e7c1036bc71b43a9cc89f05e296ffb6c11b2a6a99ec91c55856c00e7
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQS:8vWfKg78HIVX+vQS
- TLSH T18D262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application