General

  • Target
    2026-10-14_d2803939fdfeae4a5939dcfad3642f51_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
  • Size 8.6MB
  • Sample261014-nmt24styet
  • SHA256 936f8b6acb1956d0c405b9277aed1a33475f09583cfcaa74c0c1bc006596651b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-14_d2803939fdfeae4a5939dcfad3642f51_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
    • Size 8.6MB
    • SHA256 936f8b6acb1956d0c405b9277aed1a33475f09583cfcaa74c0c1bc006596651b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables referencing virtualization MAC addresses

    • Adds Run key to start application

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks