f8f2199003ad1c49b88a7a087745df02debfb7c36288e098c04f773a80ef27a0

User tags

Assigned on submission by the user, not by sandbox detections.

experiment:claude-sonnet-4.5-cross-model-wb profile:5bc3155e4da2b85364b79a5e model:claude-sonnet-4.5 mode:score-features repeat:2 sha256:f8f2199003ad1c49b88a7a087745df02debfb7c36288e098c04f773a80ef27a0

Sharing

Copy URL Twitter E-mail

General

Target
2026-01-16_2fb4fe4f3a947e3830232b48114e21cf_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
Size 27.0MB
Sample261113-ppmw9avy7l
SHA256 f8f2199003ad1c49b88a7a087745df02debfb7c36288e098c04f773a80ef27a0
MD5 3e22a21b1e1841f4938779727a862365
SHA1 cf8066e19feb447a51978267db16634e893fd547
SHA512 d88d96fb9f023460640598e8df0a8843a1e0e97aecf9a7ed563f284a7f9a47b5a5224c9f53b911fc0a7bd9abc1fd51a7e46b1bc43c533ed42ff8a017c5a4ebc1
SSDEEP 98304:5w+sy5q1SGkDwVBTwPwYQwjsCkpL2OPX:u+D5q1SGs2yKwtkpq
TLSH
T111571928B360E3B5F45324F5910F8214BF79F9966115E231A1CC8188F39BABAD33B9D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  2026-01-16_2fb4fe4f3a947e3830232b48114e21cf_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch.exe
- Size 27.0MB
- SHA256 f8f2199003ad1c49b88a7a087745df02debfb7c36288e098c04f773a80ef27a0
- MD5 3e22a21b1e1841f4938779727a862365
- SHA1 cf8066e19feb447a51978267db16634e893fd547
- SHA512 d88d96fb9f023460640598e8df0a8843a1e0e97aecf9a7ed563f284a7f9a47b5a5224c9f53b911fc0a7bd9abc1fd51a7e46b1bc43c533ed42ff8a017c5a4ebc1
- SSDEEP 98304:5w+sy5q1SGkDwVBTwPwYQwjsCkpL2OPX:u+D5q1SGs2yKwtkpq
- TLSH
  T111571928B360E3B5F45324F5910F8214BF79F9966115E231A1CC8188F39BABAD33B9D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Drops file in System32 directory
behavioral1