User tags
Assigned on submission by the user, not by sandbox detections.
experiment:claude-opus-4.6-repeat-pilot
profile:5bc3155e4da2b85364b79a5e
plan:194890df7f0746b554490773
mode:original
repeat:2
sha256:79916ebf1f2577b80b2f3a3a66297b3262d6a95feaa1dc568f1ceb1bfec5090c
General
- Target 2026-01-16_5bfb26826a5c55748fac0426a96c3147_coinminer_glassworm_poet-rat_sliver_snatch.exe
- Size 18.8MB
- Sample260821-lpjcaaxdle
- SHA256 79916ebf1f2577b80b2f3a3a66297b3262d6a95feaa1dc568f1ceb1bfec5090c
- MD5 5bfb26826a5c55748fac0426a96c3147
- SHA1 2d37c94563a32d587c15116744017cbb2fad3ab7
- SHA512 544983c6ca309ea62a06d3c3bdaa13f5ba25aaf0525bc54229079de0305025256757ba6971860f74e820fc64e7c7744ed3b0a07b6e46ec5e8452b84ed9ee2809
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcR2R7RQRER2RuRMR6RhRFRm:EQ
- TLSH T18117CF31B7E849AAC2BFD379D06206261EF0B827632AEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-01-16_5bfb26826a5c55748fac0426a96c3147_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-01-16_5bfb26826a5c55748fac0426a96c3147_coinminer_glassworm_poet-rat_sliver_snatch.exe
- Size 18.8MB
- SHA256 79916ebf1f2577b80b2f3a3a66297b3262d6a95feaa1dc568f1ceb1bfec5090c
- MD5 5bfb26826a5c55748fac0426a96c3147
- SHA1 2d37c94563a32d587c15116744017cbb2fad3ab7
- SHA512 544983c6ca309ea62a06d3c3bdaa13f5ba25aaf0525bc54229079de0305025256757ba6971860f74e820fc64e7c7744ed3b0a07b6e46ec5e8452b84ed9ee2809
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcR2R7RQRER2RuRMR6RhRFRm:EQ
- TLSH T18117CF31B7E849AAC2BFD379D06206261EF0B827632AEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory