General
- Target 2026-08-12_965502d157b7528acb6c9183e50933d9_coinminer_glassworm_poet-rat_sliver_snatch
- Size 20.8MB
- Sample260812-kg4skssemb
- SHA256 f1c79debfff7fafbce97094a18bbf2141eb14216281851ae0aee83d512620932
- MD5 965502d157b7528acb6c9183e50933d9
- SHA1 1e3e3a0ad1fed29af0b88708556d54621bf79fe7
- SHA512 439865f8e30cdcf63b5d1ec46d42ca405cb99f5fa49d45e7729c25ea008059cd74fc2b75dde8db78e7fe812f12176bf118a60ad7d7b79346770ece5ce945e105
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRkR1RlRaRVRORGR+RqR/RSR/RLR2:Ea
- TLSH T1C927CF21B7E849AAC2EFD379D06206261FF0B427622BEB8F5E8444FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-12_965502d157b7528acb6c9183e50933d9_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_965502d157b7528acb6c9183e50933d9_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_965502d157b7528acb6c9183e50933d9_coinminer_glassworm_poet-rat_sliver_snatch
- Size 20.8MB
- SHA256 f1c79debfff7fafbce97094a18bbf2141eb14216281851ae0aee83d512620932
- MD5 965502d157b7528acb6c9183e50933d9
- SHA1 1e3e3a0ad1fed29af0b88708556d54621bf79fe7
- SHA512 439865f8e30cdcf63b5d1ec46d42ca405cb99f5fa49d45e7729c25ea008059cd74fc2b75dde8db78e7fe812f12176bf118a60ad7d7b79346770ece5ce945e105
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRkR1RlRaRVRORGR+RqR/RSR/RLR2:Ea
- TLSH T1C927CF21B7E849AAC2EFD379D06206261FF0B427622BEB8F5E8444FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory