General
- Target 2026-08-28_665b95544661f39d638b08bdcec47bb1_cobalt-strike_coinminer_glassworm_poet-rat_snatch
- Size 6.3MB
- Sample260828-snmrmsbm3w
- SHA256 37a5f45b4511b76dc9e560956428847630b4966163e96eb1692c22bffe2727e3
- MD5 665b95544661f39d638b08bdcec47bb1
- SHA1 3d1f13f0f2a60f60e85b69ab48519baf49d580e3
- SHA512 31e68189d3dfdeee8f95fd9e91904c770d2e62fb30befcf92b00bcc9ca55a725190ea1b5f348678617e2c69f3f13936818cd7e20b19489da858f5faed8c2a44e
- SSDEEP 98304:zw+sy5q1SGkDwVBTwPwYfwjsCkpL2OPX0SDchR5:c+D5q1SGs2yRwtkpqphR5
- TLSH T12B666C33F8E214EAC6BEE170815257227E717CA743317B935F80569A1A66FD4BE2E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-28_665b95544661f39d638b08bdcec47bb1_cobalt-strike_coinminer_glassworm_poet-rat_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_665b95544661f39d638b08bdcec47bb1_cobalt-strike_coinminer_glassworm_poet-rat_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_665b95544661f39d638b08bdcec47bb1_cobalt-strike_coinminer_glassworm_poet-rat_snatch
- Size 6.3MB
- SHA256 37a5f45b4511b76dc9e560956428847630b4966163e96eb1692c22bffe2727e3
- MD5 665b95544661f39d638b08bdcec47bb1
- SHA1 3d1f13f0f2a60f60e85b69ab48519baf49d580e3
- SHA512 31e68189d3dfdeee8f95fd9e91904c770d2e62fb30befcf92b00bcc9ca55a725190ea1b5f348678617e2c69f3f13936818cd7e20b19489da858f5faed8c2a44e
- SSDEEP 98304:zw+sy5q1SGkDwVBTwPwYfwjsCkpL2OPX0SDchR5:c+D5q1SGs2yRwtkpqphR5
- TLSH T12B666C33F8E214EAC6BEE170815257227E717CA743317B935F80569A1A66FD4BE2E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory