General
- Target 2026-08-19_dac3333d30f903cd22f7bb2b807060d6_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- Sample260819-pr6gdawvft
- SHA256 888a2809d88303ae8306d9783732598c3f5d94589aa54da96a50ffddec4e280b
- MD5 dac3333d30f903cd22f7bb2b807060d6
- SHA1 aebbf0229978e5bb34840b0a17918165ed3c04c2
- SHA512 c713bdbb15c6befafb25066b0268129d8539a774b88ded27bb3d5caf013856bf46698e1e013e88452e4520750323f06b5c8f2b00e6a3e60e2d61d204bbff059f
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQV:8vWfKg78HIVX+vQV
- TLSH T173262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_dac3333d30f903cd22f7bb2b807060d6_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_dac3333d30f903cd22f7bb2b807060d6_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_dac3333d30f903cd22f7bb2b807060d6_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 4.3MB
- SHA256 888a2809d88303ae8306d9783732598c3f5d94589aa54da96a50ffddec4e280b
- MD5 dac3333d30f903cd22f7bb2b807060d6
- SHA1 aebbf0229978e5bb34840b0a17918165ed3c04c2
- SHA512 c713bdbb15c6befafb25066b0268129d8539a774b88ded27bb3d5caf013856bf46698e1e013e88452e4520750323f06b5c8f2b00e6a3e60e2d61d204bbff059f
- SSDEEP 49152:8SrHAwUb4Dp4wiqPZzko0NRtq1SsFvKFi8HpgGPdP6VX8V4Lc0qTQV:8vWfKg78HIVX+vQV
- TLSH T173262A17F9D704EAD57EF2708296A732BA71349943713BD36F904A991A26FE07A3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application