General
- Target 2026-09-09_0561134b64b233ff9549e6a7be759379_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 6.8MB
- Sample260910-a8eyesshrf
- SHA256 d3daedcf9eebaa2da32833c9d795eb59584fea348c69fc3d42933840c943de0e
- MD5 0561134b64b233ff9549e6a7be759379
- SHA1 66badc1fc103bc07968b91a14db46a457b075419
- SHA512 da6463120673370bbb3261bdaea6e4094f470209230c386e29a391eb98f40d9e56f0727c03d4fde0576ac5054327fdee4065e54a45191e6698f2f85128766432
- SSDEEP 98304:nH7arTiFR1r9BkDcz3XXyc+jofX5SDchRtSDchRc:H7arT4R1r9BHznX7iAhRxhRc
- TLSH T1A5768D33F9E515EAC2BEE1B0855297217E72386B83316B975FC4459B1A22FD0BA3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-09_0561134b64b233ff9549e6a7be759379_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_0561134b64b233ff9549e6a7be759379_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_0561134b64b233ff9549e6a7be759379_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 6.8MB
- SHA256 d3daedcf9eebaa2da32833c9d795eb59584fea348c69fc3d42933840c943de0e
- MD5 0561134b64b233ff9549e6a7be759379
- SHA1 66badc1fc103bc07968b91a14db46a457b075419
- SHA512 da6463120673370bbb3261bdaea6e4094f470209230c386e29a391eb98f40d9e56f0727c03d4fde0576ac5054327fdee4065e54a45191e6698f2f85128766432
- SSDEEP 98304:nH7arTiFR1r9BkDcz3XXyc+jofX5SDchRtSDchRc:H7arT4R1r9BHznX7iAhRxhRc
- TLSH T1A5768D33F9E515EAC2BEE1B0855297217E72386B83316B975FC4459B1A22FD0BA3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)