User tags
Assigned on submission by the user, not by sandbox detections.
experiment:claude-opus-4.6
profile:5bc3155e4da2b85364b79a5e
sha256:09dbe8d08b1d99becd61b67db562f5b53809cbd0545f2fcc48bcb194fa57ccc2
modes:original
General
- Target 2026-01-16_3fc14e5173897704bb04a3110f3c2c9a_coinminer_ezcob_glassworm_poet-rat_sliver_snatch.exe
- Size 18.2MB
- Sample260819-lyeqfshk2y
- SHA256 09dbe8d08b1d99becd61b67db562f5b53809cbd0545f2fcc48bcb194fa57ccc2
- MD5 3fc14e5173897704bb04a3110f3c2c9a
- SHA1 13804805cf1a546c9b8f1ef3d0fab6d5793bdb58
- SHA512 8fb06672e54ed78df4c17f2f4358a0938c31bdca406a56c96b9df5420c0b5b376c972c18dcd6d0db7d9950835a1ca83c4a4694b0007f6a6ffb315eeaff240715
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRwRcRoR9RcRFRDRvRyRc:EE
- TLSH T1B817C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-01-16_3fc14e5173897704bb04a3110f3c2c9a_coinminer_ezcob_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-01-16_3fc14e5173897704bb04a3110f3c2c9a_coinminer_ezcob_glassworm_poet-rat_sliver_snatch.exe
- Size 18.2MB
- SHA256 09dbe8d08b1d99becd61b67db562f5b53809cbd0545f2fcc48bcb194fa57ccc2
- MD5 3fc14e5173897704bb04a3110f3c2c9a
- SHA1 13804805cf1a546c9b8f1ef3d0fab6d5793bdb58
- SHA512 8fb06672e54ed78df4c17f2f4358a0938c31bdca406a56c96b9df5420c0b5b376c972c18dcd6d0db7d9950835a1ca83c4a4694b0007f6a6ffb315eeaff240715
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRwRcRoR9RcRFRDRvRyRc:EE
- TLSH T1B817C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory