General
- Target 2026-07-22_52c3b69d1e87eb5a0abe5e53cc59ddb0_coinminer_glassworm_poet-rat_sliver_snatch
- Size 23.9MB
- Sample260722-s8hy7ayane
- SHA256 db2fdfa95a15973bbf19642dd7b022587701467e8e57f0386c1ffcdabe479d44
- MD5 52c3b69d1e87eb5a0abe5e53cc59ddb0
- SHA1 5211a60156066813f73fd9b81631385e4c9603eb
- SHA512 bfa468cd1392a369b3f819d99814afe1f9e67cb48c532e45f60e1200c2e0a64d4896fb4e90d0dcfe852c4ccbf6779ae0255dbe8257513cde3623426f3191d512
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRdR/RERNRQR1RBRsRQRXRpR0R9RMRkRHRDRa:E4
- TLSH T1CC47CF2177E849AAC2EFD379D06206261FF0F427622BEB8F5E8444FD1D53B909916363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_52c3b69d1e87eb5a0abe5e53cc59ddb0_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_52c3b69d1e87eb5a0abe5e53cc59ddb0_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_52c3b69d1e87eb5a0abe5e53cc59ddb0_coinminer_glassworm_poet-rat_sliver_snatch
- Size 23.9MB
- SHA256 db2fdfa95a15973bbf19642dd7b022587701467e8e57f0386c1ffcdabe479d44
- MD5 52c3b69d1e87eb5a0abe5e53cc59ddb0
- SHA1 5211a60156066813f73fd9b81631385e4c9603eb
- SHA512 bfa468cd1392a369b3f819d99814afe1f9e67cb48c532e45f60e1200c2e0a64d4896fb4e90d0dcfe852c4ccbf6779ae0255dbe8257513cde3623426f3191d512
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRdR/RERNRQR1RBRsRQRXRpR0R9RMRkRHRDRa:E4
- TLSH T1CC47CF2177E849AAC2EFD379D06206261FF0F427622BEB8F5E8444FD1D53B909916363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory