General
- Target 2026-08-14_843625ce6f9058f98e63dbcf799a064c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260814-s8lebaaf56
- SHA256 20c10a5d45913e668aaf6f9c69143e58c9ca460ae801d7fe2200258d740ab5e2
- MD5 843625ce6f9058f98e63dbcf799a064c
- SHA1 d7831b7fab55d3eef3da6248ae2cc964838b4c54
- SHA512 32b07897a6c2194706587381eaacbdc093be25ff0c5d002b5cbf5aaa2052dc1f0f51f768e5f220aa6b7925034ae02a48b5b5477a84287b4f8289640021633b45
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ8:8vWfKg78HIVX+vQ8
- TLSH T1EE262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_843625ce6f9058f98e63dbcf799a064c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_843625ce6f9058f98e63dbcf799a064c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_843625ce6f9058f98e63dbcf799a064c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 20c10a5d45913e668aaf6f9c69143e58c9ca460ae801d7fe2200258d740ab5e2
- MD5 843625ce6f9058f98e63dbcf799a064c
- SHA1 d7831b7fab55d3eef3da6248ae2cc964838b4c54
- SHA512 32b07897a6c2194706587381eaacbdc093be25ff0c5d002b5cbf5aaa2052dc1f0f51f768e5f220aa6b7925034ae02a48b5b5477a84287b4f8289640021633b45
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQ8:8vWfKg78HIVX+vQ8
- TLSH T1EE262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application