2f1285923fd696138e5fc00392ff24676a99c26ab3372f456889d3674857f6ef

User tags

Assigned on submission by the user, not by sandbox detections.

experiment:claude-opus-4.6-repeat-pilot profile:5bc3155e4da2b85364b79a5e plan:194890df7f0746b554490773 mode:original repeat:1 sha256:2f1285923fd696138e5fc00392ff24676a99c26ab3372f456889d3674857f6ef

Sharing

Copy URL Twitter E-mail

General

Target
2026-01-16_897ec3089c6a97152330ead2f7d8b4cc_coinminer_glassworm_poet-rat_sliver_snatch.exe
Size 25.7MB
Sample260820-1wwzaabl4w
SHA256 2f1285923fd696138e5fc00392ff24676a99c26ab3372f456889d3674857f6ef
MD5 897ec3089c6a97152330ead2f7d8b4cc
SHA1 ab20992dbd84f57b07bea51a82852cb3042634fb
SHA512 6e7eead3f73a57c6b779477cfffce070edf108ee4988d76c26dd05059160e2c3de9f9b3cc54f247b5d8d0cef1bfba1e7620417e2d4334c334cab71c652fd0978
SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRhRaRlRnR1RNRVRNRLRyRLRWR5RBR0RpRzRPR+RC:E2
TLSH
T11A47CF2177E84AAAC2EFD379D06206261FF0F427622BEB4F5E8454FD1D53B909912363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Targets

- Target
  2026-01-16_897ec3089c6a97152330ead2f7d8b4cc_coinminer_glassworm_poet-rat_sliver_snatch.exe
- Size 25.7MB
- SHA256 2f1285923fd696138e5fc00392ff24676a99c26ab3372f456889d3674857f6ef
- MD5 897ec3089c6a97152330ead2f7d8b4cc
- SHA1 ab20992dbd84f57b07bea51a82852cb3042634fb
- SHA512 6e7eead3f73a57c6b779477cfffce070edf108ee4988d76c26dd05059160e2c3de9f9b3cc54f247b5d8d0cef1bfba1e7620417e2d4334c334cab71c652fd0978
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRhRaRlRnR1RNRVRNRLRyRLRWR5RBR0RpRzRPR+RC:E2
- TLSH
  T11A47CF2177E84AAAC2EFD379D06206261FF0F427622BEB4F5E8454FD1D53B909912363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Drops file in System32 directory
behavioral1