User tags
Assigned on submission by the user, not by sandbox detections.
experiment:claude-opus-4.6-repeat-pilot
profile:5bc3155e4da2b85364b79a5e
plan:194890df7f0746b554490773
mode:original
repeat:1
sha256:4dfae1e7215baa04178fd7043e1039493ecd44bfb824c75e4c4165cf155c2e4f
General
- Target 2026-01-16_23c8fcbf750cdc7fa17c09fa25d385ab_coinminer_ezcob_glassworm_poet-rat_sliver_snatch.exe
- Size 18.4MB
- Sample260820-17442awfnf
- SHA256 4dfae1e7215baa04178fd7043e1039493ecd44bfb824c75e4c4165cf155c2e4f
- MD5 23c8fcbf750cdc7fa17c09fa25d385ab
- SHA1 a80ff478cbd6e2054e6d1c712367245f375c06cd
- SHA512 1e52cf017e208e8644b46c6ebb0eba8f929080fd38c84fc10bcea2f329ad24508f001187f798e76dd68f7e975b81d3372094db0ba19eb5984fffff3621718151
- SSDEEP 393216:DAkLRCR3R7R6RLRyRUR/R8RkRbRoR6RIRhRdR1Rx:Ej
- TLSH T16717C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-01-16_23c8fcbf750cdc7fa17c09fa25d385ab_coinminer_ezcob_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-01-16_23c8fcbf750cdc7fa17c09fa25d385ab_coinminer_ezcob_glassworm_poet-rat_sliver_snatch.exe
- Size 18.4MB
- SHA256 4dfae1e7215baa04178fd7043e1039493ecd44bfb824c75e4c4165cf155c2e4f
- MD5 23c8fcbf750cdc7fa17c09fa25d385ab
- SHA1 a80ff478cbd6e2054e6d1c712367245f375c06cd
- SHA512 1e52cf017e208e8644b46c6ebb0eba8f929080fd38c84fc10bcea2f329ad24508f001187f798e76dd68f7e975b81d3372094db0ba19eb5984fffff3621718151
- SSDEEP 393216:DAkLRCR3R7R6RLRyRUR/R8RkRbRoR6RIRhRdR1Rx:Ej
- TLSH T16717C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory