General
- Target 2026-08-21_5539bfb58d42d6e8aa619263df43f2cd_cobalt-strike_coinminer_glassworm_poet-rat_snatch
- Size 5.6MB
- Sample260821-e7adrsw1ev
- SHA256 b9f8ae4a9957bc2e73616a7fe690273783da79dc83a66c68d4c6b6ed3a81b5bc
- MD5 5539bfb58d42d6e8aa619263df43f2cd
- SHA1 c7967ab88bbe406b63c2717eed0826c4b077207a
- SHA512 006476adb53ba426f29a848de37449c92b438b0e97e16ac468177aec5ef7b6c3df695deb8d613539fed21b1be3ec26284909d21a4b1beeb18dba854b3c17213c
- SSDEEP 98304:gw+sy5q1SGkDwVBTwPwYqwjsCkpL2OPX:l+D5q1SGs2ycwtkpq
- TLSH T11346C697A99240E6CF6FE1B641C0D3A23B727C4D07626F936E5087970A56AF4372E730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_5539bfb58d42d6e8aa619263df43f2cd_cobalt-strike_coinminer_glassworm_poet-rat_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_5539bfb58d42d6e8aa619263df43f2cd_cobalt-strike_coinminer_glassworm_poet-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_5539bfb58d42d6e8aa619263df43f2cd_cobalt-strike_coinminer_glassworm_poet-rat_snatch
- Size 5.6MB
- SHA256 b9f8ae4a9957bc2e73616a7fe690273783da79dc83a66c68d4c6b6ed3a81b5bc
- MD5 5539bfb58d42d6e8aa619263df43f2cd
- SHA1 c7967ab88bbe406b63c2717eed0826c4b077207a
- SHA512 006476adb53ba426f29a848de37449c92b438b0e97e16ac468177aec5ef7b6c3df695deb8d613539fed21b1be3ec26284909d21a4b1beeb18dba854b3c17213c
- SSDEEP 98304:gw+sy5q1SGkDwVBTwPwYqwjsCkpL2OPX:l+D5q1SGs2ycwtkpq
- TLSH T11346C697A99240E6CF6FE1B641C0D3A23B727C4D07626F936E5087970A56AF4372E730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory