General
- Target 2026-08-10_9ab96b220b05e7e9ed203a1446bbda2e_coinminer_glassworm_poet-rat_sliver_snatch
- Size 16.1MB
- Sample260810-ly41ca1sew
- SHA256 26c1b09eb464d6c5ba90b5448b7c13bc962c8400657cd6fed728de2330be19fd
- MD5 9ab96b220b05e7e9ed203a1446bbda2e
- SHA1 8bfbc83de0fd87c85f1f0081a84da1471997e4be
- SHA512 fc622e847dff5a5112d7aab74e2c9ad3dad1f1045924638c092c2e1305884def791062bd9ea38769a4f7df99b7e395251968ff94db0de202f492361bc2d35cfc
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRFRuR8RdRBRnRs:E/
- TLSH T1C707BF32B7E849AAC2BFD275D06206222EF1B8275326FB8B5E8055FD1D53BD09915323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_9ab96b220b05e7e9ed203a1446bbda2e_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_9ab96b220b05e7e9ed203a1446bbda2e_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_9ab96b220b05e7e9ed203a1446bbda2e_coinminer_glassworm_poet-rat_sliver_snatch
- Size 16.1MB
- SHA256 26c1b09eb464d6c5ba90b5448b7c13bc962c8400657cd6fed728de2330be19fd
- MD5 9ab96b220b05e7e9ed203a1446bbda2e
- SHA1 8bfbc83de0fd87c85f1f0081a84da1471997e4be
- SHA512 fc622e847dff5a5112d7aab74e2c9ad3dad1f1045924638c092c2e1305884def791062bd9ea38769a4f7df99b7e395251968ff94db0de202f492361bc2d35cfc
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRFRuR8RdRBRnRs:E/
- TLSH T1C707BF32B7E849AAC2BFD275D06206222EF1B8275326FB8B5E8055FD1D53BD09915323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory