General
- Target 2026-08-11_305673d0f65bf295b07b5f05336d0c31_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260811-2x153atfjb
- SHA256 08086fb93099119302ded381e3af15845a41f076b7498b081dab7098691113c9
- MD5 305673d0f65bf295b07b5f05336d0c31
- SHA1 6aa7c2fa97362084d37d5acdcba416e85b166d3b
- SHA512 1ab79f659313a046e61b79ccfc77c062f96756e4a55057c8a5feca20c9b25b8691cf6ef5fafd1f61705d1041dcc3198db3e1e669cbf11702edcc9b55e0f062ed
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQk:8vWfKg78HIVX+vQk
- TLSH T12C262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_305673d0f65bf295b07b5f05336d0c31_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_305673d0f65bf295b07b5f05336d0c31_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_305673d0f65bf295b07b5f05336d0c31_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 08086fb93099119302ded381e3af15845a41f076b7498b081dab7098691113c9
- MD5 305673d0f65bf295b07b5f05336d0c31
- SHA1 6aa7c2fa97362084d37d5acdcba416e85b166d3b
- SHA512 1ab79f659313a046e61b79ccfc77c062f96756e4a55057c8a5feca20c9b25b8691cf6ef5fafd1f61705d1041dcc3198db3e1e669cbf11702edcc9b55e0f062ed
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQk:8vWfKg78HIVX+vQk
- TLSH T12C262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application