General
- Target 2026-09-10_cbc43d1d2693bb07466a2b463c592b54_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 6.8MB
- Sample260910-mmsnls1hjb
- SHA256 7c9b9f2ccff315fba992c5f59ddc545dc5224c98c85863a9deb190c3737af677
- MD5 cbc43d1d2693bb07466a2b463c592b54
- SHA1 21a3820372fb002b2590ea4376d4e94fd4943dc7
- SHA512 ecdfa4060c85fb0000d0c82fd17243007386c26399a762c30ecc861849beff945c3de273b181ce0b4a6372b16c8fc04689162f7b7f19af390b7c6da7b6111577
- SSDEEP 98304:nH7arTiFR1r9BkDcz3XXyc+jofX5SDchRvSDchRc:H7arT4R1r9BHznX7iAhRThRc
- TLSH T13D768D33F9E515EAC2BEE1B0855297217E72386B83316B975FC4459B1A22FD0BA3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-10_cbc43d1d2693bb07466a2b463c592b54_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_cbc43d1d2693bb07466a2b463c592b54_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_cbc43d1d2693bb07466a2b463c592b54_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 6.8MB
- SHA256 7c9b9f2ccff315fba992c5f59ddc545dc5224c98c85863a9deb190c3737af677
- MD5 cbc43d1d2693bb07466a2b463c592b54
- SHA1 21a3820372fb002b2590ea4376d4e94fd4943dc7
- SHA512 ecdfa4060c85fb0000d0c82fd17243007386c26399a762c30ecc861849beff945c3de273b181ce0b4a6372b16c8fc04689162f7b7f19af390b7c6da7b6111577
- SSDEEP 98304:nH7arTiFR1r9BkDcz3XXyc+jofX5SDchRvSDchRc:H7arT4R1r9BHznX7iAhRThRc
- TLSH T13D768D33F9E515EAC2BEE1B0855297217E72386B83316B975FC4459B1A22FD0BA3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)