General
- Target 2026-09-23_83ea135399c6cd54b7130445f0aadef1_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.6MB
- Sample260923-2atsgaef46
- SHA256 488164cd247dbc6fc0fc42a1fde8097bd72478582333c15147f95ea1fa605761
- MD5 83ea135399c6cd54b7130445f0aadef1
- SHA1 398d71656b06a63b2dbb83835c1ec58f9f69e9ed
- SHA512 f477a6a6c4bb6febf1214c35a803283b35a7db741377c9fea103522d11ac7ff4f83e72b8d20cd4f3aabca059e757f1dedda61d0d230fb9f960a3730401aeeedb
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhREhRchR:Ts/cRLRBR4R+RlR8R9RbRYRAR
- TLSH T149E6BF22B7E449AEC2FFD274D06206217EB1B8675326EB8B5F8045F91D63BD0AD19313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-23_83ea135399c6cd54b7130445f0aadef1_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_83ea135399c6cd54b7130445f0aadef1_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_83ea135399c6cd54b7130445f0aadef1_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.6MB
- SHA256 488164cd247dbc6fc0fc42a1fde8097bd72478582333c15147f95ea1fa605761
- MD5 83ea135399c6cd54b7130445f0aadef1
- SHA1 398d71656b06a63b2dbb83835c1ec58f9f69e9ed
- SHA512 f477a6a6c4bb6febf1214c35a803283b35a7db741377c9fea103522d11ac7ff4f83e72b8d20cd4f3aabca059e757f1dedda61d0d230fb9f960a3730401aeeedb
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhREhRchR:Ts/cRLRBR4R+RlR8R9RbRYRAR
- TLSH T149E6BF22B7E449AEC2FFD274D06206217EB1B8675326EB8B5F8045F91D63BD0AD19313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory