General
- Target 2026-09-05_72f9c3df78368af6991b78d20ff15512_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 9.7MB
- Sample260907-v7cf5adn3z
- SHA256 9714e2bde6ff3601f5f7a93fef91b26e3e7f126c188c91ec54b39cb33946dc89
- MD5 72f9c3df78368af6991b78d20ff15512
- SHA1 4e332349afe67644015f0c1011c4a66ba23004c3
- SHA512 43053105765c5e3fca4a4b268ce5aa6b1463d823dc808d3d6bf0fdb622220cb62a83ff4d5ddb400d7dc609b0e608e6bc83bf2d28174d0d6810a3f5fd2a8b63e4
- SSDEEP 196608:7sarBo5mQvxAayZaXdhRzhRkhRWhRzhRzhRT:wpcORVR4RCRVRVRT
- TLSH T184A6B033F6E409EBC2BEE274C16297217EB174675322B7975F8045EA1A13BD0AD2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-05_72f9c3df78368af6991b78d20ff15512_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_72f9c3df78368af6991b78d20ff15512_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_72f9c3df78368af6991b78d20ff15512_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 9.7MB
- SHA256 9714e2bde6ff3601f5f7a93fef91b26e3e7f126c188c91ec54b39cb33946dc89
- MD5 72f9c3df78368af6991b78d20ff15512
- SHA1 4e332349afe67644015f0c1011c4a66ba23004c3
- SHA512 43053105765c5e3fca4a4b268ce5aa6b1463d823dc808d3d6bf0fdb622220cb62a83ff4d5ddb400d7dc609b0e608e6bc83bf2d28174d0d6810a3f5fd2a8b63e4
- SSDEEP 196608:7sarBo5mQvxAayZaXdhRzhRkhRWhRzhRzhRT:wpcORVR4RCRVRVRT
- TLSH T184A6B033F6E409EBC2BEE274C16297217EB174675322B7975F8045EA1A13BD0AD2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)