General
- Target 2026-09-29_e466d732d80d0959ecbb8f39960a6632_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.6MB
- Sample260930-s683layekd
- SHA256 3e76bff5f1b43168b929c04f4a51399a05ef889d6db437d2058b43dba65a498b
- MD5 e466d732d80d0959ecbb8f39960a6632
- SHA1 a370eb0510a2fe4f2fcc50ba06240a27345eaa17
- SHA512 b89af1cb2f4cd064f7438222e382cfa9977ca88532307a93eb8af6282c9f5d38d03fefe0845fec2111a321f057cb9b63e2327a0e44793f8b194780ac44281c02
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhREhRNhRe:Ts/cRLRBR4R+RlR8R9RbRYRfRe
- TLSH T137E6BF22B7E449AEC2FFD274D06206217EB1B8675326EB8B5F8045F91D63BD0AD19313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-29_e466d732d80d0959ecbb8f39960a6632_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_e466d732d80d0959ecbb8f39960a6632_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_e466d732d80d0959ecbb8f39960a6632_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.6MB
- SHA256 3e76bff5f1b43168b929c04f4a51399a05ef889d6db437d2058b43dba65a498b
- MD5 e466d732d80d0959ecbb8f39960a6632
- SHA1 a370eb0510a2fe4f2fcc50ba06240a27345eaa17
- SHA512 b89af1cb2f4cd064f7438222e382cfa9977ca88532307a93eb8af6282c9f5d38d03fefe0845fec2111a321f057cb9b63e2327a0e44793f8b194780ac44281c02
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhREhRNhRe:Ts/cRLRBR4R+RlR8R9RbRYRfRe
- TLSH T137E6BF22B7E449AEC2FFD274D06206217EB1B8675326EB8B5F8045F91D63BD0AD19313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory