58b4a1cc9f3a40e6733d8455701b39fa9e038cbb419cda70fe60cba138e26549

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 15:24

Target
2026-10-23_087da024dc1ab9ce1abd9f35b5ff499c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Size 11.8MB
Sample261023-ss2rcsct5x
SHA256 58b4a1cc9f3a40e6733d8455701b39fa9e038cbb419cda70fe60cba138e26549
MD5 087da024dc1ab9ce1abd9f35b5ff499c
SHA1 3e3947cf21c55cb2a6910b4993bed644cbdd927b
SHA512 7e6d394051d6ce3c272cce30de9244b2e56429c2bd25d2d4f38d8c06a726a00134b548b62136259e7d9a5900ac3ee847ea7260bbc8c771dd0ac94a316d6a6b55
SSDEEP 196608:udnbH66Vs3oyULL5+a80gCO2inQaP1f33crs:GbH4ILoIuY61/j
TLSH
T1DFC67D06F8A610E5CBBEE13086659322BA7134A583307FD72F9499BA1756FE4773E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1804	2026-10-23_087da024dc1ab9ce1abd9f35b5ff499c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
1804	2026-10-23_087da024dc1ab9ce1abd9f35b5ff499c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
1804	2026-10-23_087da024dc1ab9ce1abd9f35b5ff499c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
1804	2026-10-23_087da024dc1ab9ce1abd9f35b5ff499c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-23_087da024dc1ab9ce1abd9f35b5ff499c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-23_087da024dc1ab9ce1abd9f35b5ff499c_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1804