General

  • Target
    2026-09-26_4be7ce3fbf9e292b04f8c318a5dd5edc_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
  • Size 9.2MB
  • Sample260926-291eashb24
  • SHA256 cee9fd0b147982a8589750bdcbe0af0cd66edc567e39af1f85968838667f4326
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-26_4be7ce3fbf9e292b04f8c318a5dd5edc_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
    • Size 9.2MB
    • SHA256 cee9fd0b147982a8589750bdcbe0af0cd66edc567e39af1f85968838667f4326
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables referencing virtualization MAC addresses

    • Adds Run key to start application

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks