General
- Target 2026-09-04_1ef564ccf8bc97784c10ef48ceadd13e_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 7.0MB
- Sample260905-vb8jpav1dz
- SHA256 2e9d044b25ca3192ab73f44b2bcedfa6b3b3e2f50b11272dbff391d7897f6a10
- MD5 1ef564ccf8bc97784c10ef48ceadd13e
- SHA1 ae774a56209d616974dbfd6d5e6a3a66a20dc358
- SHA512 583b3dc6a790dce113c1c30db21de08fe9f8e32ac7a06f97a7952fd5ea5cd5809ef4d768f9217d10654d68ab13ac3fa860cbe50ed8ed3f50b90c790bf502ec61
- SSDEEP 98304:nH7arTiFR1r9BkDcz3XXyc+jofX5SDchRRSDchRZ:H7arT4R1r9BHznX7iAhRFhRZ
- TLSH T17E768D33F9E515EAC2BEE1B0855297217E72386B83316B975FC4459B1A22FD0BA3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-04_1ef564ccf8bc97784c10ef48ceadd13e_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_1ef564ccf8bc97784c10ef48ceadd13e_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_1ef564ccf8bc97784c10ef48ceadd13e_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 7.0MB
- SHA256 2e9d044b25ca3192ab73f44b2bcedfa6b3b3e2f50b11272dbff391d7897f6a10
- MD5 1ef564ccf8bc97784c10ef48ceadd13e
- SHA1 ae774a56209d616974dbfd6d5e6a3a66a20dc358
- SHA512 583b3dc6a790dce113c1c30db21de08fe9f8e32ac7a06f97a7952fd5ea5cd5809ef4d768f9217d10654d68ab13ac3fa860cbe50ed8ed3f50b90c790bf502ec61
- SSDEEP 98304:nH7arTiFR1r9BkDcz3XXyc+jofX5SDchRRSDchRZ:H7arT4R1r9BHznX7iAhRFhRZ
- TLSH T17E768D33F9E515EAC2BEE1B0855297217E72386B83316B975FC4459B1A22FD0BA3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)