2026-09-03_40c94a34b0053ac33fea26eb40965fce_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
Classification: Malicious
2026-09-03_40c94a34b0053ac33fea26eb40965fce_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch is a trojan. Detected by 51 antivirus engines.
Detection summary
- 51 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: GRAVITYRAT (S0237)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Gravityrat | Triage | 2026-09-04 10:29:50 | 2026-09-04 10:29:50 | malicious-activity | S0237 GravityRAT |
Tags
gravityrat backdoor persistenceSample information
- Filenames
- 2026-09-03_40c94a34b0053ac33fea26eb40965fce_cobalt-strike_coinminer_glassworm_poet-rat_sliver_snatch
- SHA-256
15956b71e397d50917b05f1547476d1da622ce17a71aacdba3a1743eb005d10c- First indexed
- 2026-09-04 10:29:50
- Last updated
- 2026-10-11 00:27:47
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Tedy.816526 |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Misc] |
| AhnLab-V3 | Malware/Win64.RL_Generic.R305727 |
| Antiy-AVL | Trojan/Win32.Vimditator |
| Arcabit | Trojan.Tedy.DC758E |
| Avast | Win32:MalwareX-gen [Misc] |
| Avira | TR/Spy.Gen |
| BitDefender | Gen:Variant.Tedy.816526 |
| Bkav | W32.Malware.779606D6 |
| CAT-QuickHeal | Trojan.GravityRAT.S35101943 |
| CTX | exe.unknown.tedy |
| ClamAV | Win.Trojan.GravityRAT-6511862-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.GravityRAT.3 |
| ESET-NOD32 | Win64/Agent.PR trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Tedy.816526 (B) |
| F-Secure | Trojan.TR/Spy.Gen |
| Fortinet | W64/MALD2.5B07!tr |
| GData | Gen:Variant.Tedy.816526 |
| Detected | |
| Gridinsoft | Ransom.Win64.Bladabindi.oa!s1 |
| Jiangmin | Trojan.Agent.ceqd |
| K7AntiVirus | Trojan ( 005d83ea1 ) |
| K7GW | Trojan ( 005d83ea1 ) |
| Kaspersky | HEUR:Trojan.Win32.Vimditator.pefng |
| Malwarebytes | Trojan.Dropper.Generic |
| MaxSecure | Trojan.Malware.121218.susgen |
| McAfeeD | ti!15956B71E397 |
| MicroWorld-eScan | Gen:Variant.Tedy.816526 |
| Microsoft | Trojan:Win64/GravityRat!rfn |
| NANO-Antivirus | Trojan.Win64.Agent.lflwwr |
| Rising | Backdoor.GravityRAT!1.BE3F (CLASSIC) |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win64.Trojan.vh |
| Sophos | Troj/Agent-BLKX |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Trojan-DL.Win64.Agent.hd |
| TrellixENS | Trojan-JAQC!40C94A34B005 |
| VBA32 | Backdoor.GravityRAT |
| VIPRE | Gen:Variant.Tedy.816526 |
| Varist | W64/Trojan3.ASJX |
| VirIT | Trojan.Win32.Genus.XSO |
| Yandex | Trojan.Vimditator!/ObcJ2pldiQ |
| ZoneAlarm | Troj/Agent-BLKX |
| huorong | Trojan/Agent.ayn |
| tehtris | Generic.Malware |