General
- Target 2026-09-07_f448e46bf0495492f054e07ebd62812f_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 6.9MB
- Sample260908-bpfahsbj4y
- SHA256 56cc5c20a0bead8aad0c02bf2ef4d3d3b106d026e2cc996c2fd1a2bc9df103d1
- MD5 f448e46bf0495492f054e07ebd62812f
- SHA1 b1d156cdc8ee83339797922c63d7252f6a4b8bbd
- SHA512 2fdfc97633a492cd893a13f37dad9b39404eab5e9339dfd403de7dac2141e422874aff56d70478b4ab64b4060d63aa715e52228f54cd2d69118e93078482319b
- SSDEEP 98304:nH7arTiFR1r9BkDcz3XXyc+jofX5SDchRRSDchRc:H7arT4R1r9BHznX7iAhRFhRc
- TLSH T1C0768D33F9E515EAC2BEE1B0855297217E72386B83316B975FC4459B1A22FD0BA3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-07_f448e46bf0495492f054e07ebd62812f_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_f448e46bf0495492f054e07ebd62812f_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_f448e46bf0495492f054e07ebd62812f_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 6.9MB
- SHA256 56cc5c20a0bead8aad0c02bf2ef4d3d3b106d026e2cc996c2fd1a2bc9df103d1
- MD5 f448e46bf0495492f054e07ebd62812f
- SHA1 b1d156cdc8ee83339797922c63d7252f6a4b8bbd
- SHA512 2fdfc97633a492cd893a13f37dad9b39404eab5e9339dfd403de7dac2141e422874aff56d70478b4ab64b4060d63aa715e52228f54cd2d69118e93078482319b
- SSDEEP 98304:nH7arTiFR1r9BkDcz3XXyc+jofX5SDchRRSDchRc:H7arT4R1r9BHznX7iAhRFhRc
- TLSH T1C0768D33F9E515EAC2BEE1B0855297217E72386B83316B975FC4459B1A22FD0BA3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)