General
- Target 2026-09-06_5093ca466a62311ace71900cb6472dc1_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 10.7MB
- Sample260907-d2y99sbr4y
- SHA256 96f876f8f4374c30f28002576bd41396fac863bcdc030642f30db4434042dcb2
- MD5 5093ca466a62311ace71900cb6472dc1
- SHA1 b021bf2cb7782ee16234f6ea8510f9122e100bae
- SHA512 3ceee385b1f49c9903fccc61727cac9a84de0390b1f3ebd31ec829328af69b7fcb0a6b69996c9a33f17e860b13b2844d2c70c26853a8cfcd14d50e3150a6006e
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRnhR2hRhhRthRdhRz:/s/cRLRhRiRrR/RvRz
- TLSH T12BB6B032F6E505EEC6BEE274C06257217EB1B8574322BB8B5F8045B91D63BD0AD2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-06_5093ca466a62311ace71900cb6472dc1_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_5093ca466a62311ace71900cb6472dc1_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_5093ca466a62311ace71900cb6472dc1_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 10.7MB
- SHA256 96f876f8f4374c30f28002576bd41396fac863bcdc030642f30db4434042dcb2
- MD5 5093ca466a62311ace71900cb6472dc1
- SHA1 b021bf2cb7782ee16234f6ea8510f9122e100bae
- SHA512 3ceee385b1f49c9903fccc61727cac9a84de0390b1f3ebd31ec829328af69b7fcb0a6b69996c9a33f17e860b13b2844d2c70c26853a8cfcd14d50e3150a6006e
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRnhR2hRhhRthRdhRz:/s/cRLRhRiRrR/RvRz
- TLSH T12BB6B032F6E505EEC6BEE274C06257217EB1B8574322BB8B5F8045B91D63BD0AD2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory