General
- Target 2026-08-22_a77ef664ddede3873f4c963819d859bb_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 8.0MB
- Sample260823-dnadzsscna
- SHA256 7368680d12524b191fb6c5ae9c42c497c9db52958868b483fc08e3a85587d7dc
- MD5 a77ef664ddede3873f4c963819d859bb
- SHA1 6124ee841f7ec6a0120b7aee3f693cab4a69d70f
- SHA512 173188c8bae41b2c69a4e2e24e87a51387f1895e06d913999556d461501af655f909c3261d4775a396939fecb3723fe09dff643ba1f391ebb0edbeb82a944ce4
- SSDEEP 98304:3CbD4VZphgb/cc3oXlxRLT6fC93BnXASDchRYSDchR7SDchRg:ybDkZphgT73KxRyfCfShR6hRfhRg
- TLSH T113868C33F9A614EAC2BEE170C16257217E72747B43317B875F8059AA1A22FD0BE2D351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-22_a77ef664ddede3873f4c963819d859bb_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_a77ef664ddede3873f4c963819d859bb_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_a77ef664ddede3873f4c963819d859bb_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 8.0MB
- SHA256 7368680d12524b191fb6c5ae9c42c497c9db52958868b483fc08e3a85587d7dc
- MD5 a77ef664ddede3873f4c963819d859bb
- SHA1 6124ee841f7ec6a0120b7aee3f693cab4a69d70f
- SHA512 173188c8bae41b2c69a4e2e24e87a51387f1895e06d913999556d461501af655f909c3261d4775a396939fecb3723fe09dff643ba1f391ebb0edbeb82a944ce4
- SSDEEP 98304:3CbD4VZphgb/cc3oXlxRLT6fC93BnXASDchRYSDchR7SDchRg:ybDkZphgT73KxRyfCfShR6hRfhRg
- TLSH T113868C33F9A614EAC2BEE170C16257217E72747B43317B875F8059AA1A22FD0BE2D351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory