General
- Target 2026-07-07_30c5ed17b13ff030fd52a24ea6756341_coinminer_elex_glassworm_poet-rat_rex_sliver_snatch
- Size 14.6MB
- Sample260707-msp5nsds6l
- SHA256 51612a386f48b0002d92d066ed89d285e54d2c518fa100123c732d43a597026d
- MD5 30c5ed17b13ff030fd52a24ea6756341
- SHA1 bb6e237f5f0e2536d087cb359f6f1530e2dd1db4
- SHA512 a750d6564e244b096cd8705e82103a87067e44139d11b7fce437c7f19c0b2d4da45f0eced984d9283522fdc69130022f3a42c995a123d11100926b022943b2e2
- SSDEEP 196608:HSQ3T7Jh/HhiSMsYydjl4PgMNLPSdfJmhXp:zL/BO9UKFLqdfJmL
- TLSH T12BF65B90E9CB00F9EE132D70459B923F23316604D329DDC7D6548E67FA27AE21A33E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_30c5ed17b13ff030fd52a24ea6756341_coinminer_elex_glassworm_poet-rat_rex_sliver_snatch.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_30c5ed17b13ff030fd52a24ea6756341_coinminer_elex_glassworm_poet-rat_rex_sliver_snatch.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_30c5ed17b13ff030fd52a24ea6756341_coinminer_elex_glassworm_poet-rat_rex_sliver_snatch
- Size 14.6MB
- SHA256 51612a386f48b0002d92d066ed89d285e54d2c518fa100123c732d43a597026d
- MD5 30c5ed17b13ff030fd52a24ea6756341
- SHA1 bb6e237f5f0e2536d087cb359f6f1530e2dd1db4
- SHA512 a750d6564e244b096cd8705e82103a87067e44139d11b7fce437c7f19c0b2d4da45f0eced984d9283522fdc69130022f3a42c995a123d11100926b022943b2e2
- SSDEEP 196608:HSQ3T7Jh/HhiSMsYydjl4PgMNLPSdfJmhXp:zL/BO9UKFLqdfJmL
- TLSH T12BF65B90E9CB00F9EE132D70459B923F23316604D329DDC7D6548E67FA27AE21A33E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.