General
- Target 2026-09-04_139bb6aada1043cb22f2943af7dd335b_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 9.7MB
- Sample260905-wksehazbma
- SHA256 194e80bfb784fb6984fe6ef7e23cd36aca7283ced89b76ca59d33a86e27363b4
- MD5 139bb6aada1043cb22f2943af7dd335b
- SHA1 2cb977c510561317d5d792ca575570ae1cafbad8
- SHA512 43eb2d7b25fb7efae58d57586162a3c69ab3b8015925b9c45ac009bc4e01bb934d25a0564e61f32695386b03f02b199046218a00b221269336fa5041b604bbc2
- SSDEEP 196608:7sarBo5mQvxAayZaXdhRzhRkhRWhRzhRzhRF:wpcORVR4RCRVRVRF
- TLSH T108A6B033F6E409EBC2BEE274C16297217EB174675322B7975F8045EA1A13BD0AD2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-04_139bb6aada1043cb22f2943af7dd335b_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_139bb6aada1043cb22f2943af7dd335b_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_139bb6aada1043cb22f2943af7dd335b_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 9.7MB
- SHA256 194e80bfb784fb6984fe6ef7e23cd36aca7283ced89b76ca59d33a86e27363b4
- MD5 139bb6aada1043cb22f2943af7dd335b
- SHA1 2cb977c510561317d5d792ca575570ae1cafbad8
- SHA512 43eb2d7b25fb7efae58d57586162a3c69ab3b8015925b9c45ac009bc4e01bb934d25a0564e61f32695386b03f02b199046218a00b221269336fa5041b604bbc2
- SSDEEP 196608:7sarBo5mQvxAayZaXdhRzhRkhRWhRzhRzhRF:wpcORVR4RCRVRVRF
- TLSH T108A6B033F6E409EBC2BEE274C16297217EB174675322B7975F8045EA1A13BD0AD2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)