General
- Target 2026-09-22_4e4ccd7f7c76e46d4d5d0d52d6131179_cobalt-strike_coinminer_glassworm
- Size 1.6MB
- Sample260922-zftcsasbpb
- SHA256 a3ba8da79d7a61e96825f24eabd12c4c79848fbd8a1141a3597506701fd82526
- MD5 4e4ccd7f7c76e46d4d5d0d52d6131179
- SHA1 e81688d8210605823697643fcfb239ed6b38266e
- SHA512 4dd25557b5546793aa023e1da1c52805fbbe0a9c873367914b7a20ac3ab89b1f4f0a4653a5db1735da993f2cba803cf0cff1fad42ebaf41593bd221f5ef704ec
- SSDEEP 24576:gnbvFOLIo5EgVD7dkg0hLWWC1FSd+YVXN:AbvFO8Z/gkLWWC1Fm
- TLSH T19A756C57FCB1F968C6A9923108A58097A77374180BB117DF9B409B7A0E67BC01F3D3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-22_4e4ccd7f7c76e46d4d5d0d52d6131179_cobalt-strike_coinminer_glassworm.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-22_4e4ccd7f7c76e46d4d5d0d52d6131179_cobalt-strike_coinminer_glassworm.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://124.221.100.99:9999/bT76dWO5
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:70.0) Gecko/20190101 Firefox/70.0
Targets
-
- Target 2026-09-22_4e4ccd7f7c76e46d4d5d0d52d6131179_cobalt-strike_coinminer_glassworm
- Size 1.6MB
- SHA256 a3ba8da79d7a61e96825f24eabd12c4c79848fbd8a1141a3597506701fd82526
- MD5 4e4ccd7f7c76e46d4d5d0d52d6131179
- SHA1 e81688d8210605823697643fcfb239ed6b38266e
- SHA512 4dd25557b5546793aa023e1da1c52805fbbe0a9c873367914b7a20ac3ab89b1f4f0a4653a5db1735da993f2cba803cf0cff1fad42ebaf41593bd221f5ef704ec
- SSDEEP 24576:gnbvFOLIo5EgVD7dkg0hLWWC1FSd+YVXN:AbvFO8Z/gkLWWC1Fm
- TLSH T19A756C57FCB1F968C6A9923108A58097A77374180BB117DF9B409B7A0E67BC01F3D3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.