General
- Target 2026-08-22_159a51ce9673850ec3b66a46603c6730_coinminer_glassworm_poet-rat_sliver_snatch
- Size 18.2MB
- Sample260823-pd81ca1wcv
- SHA256 c5894c5055dad167bdbec03f4964b93706f2e205bec10ccd22369fda05ee20af
- MD5 159a51ce9673850ec3b66a46603c6730
- SHA1 63a2d888c127bb1b0f81a4cef9b7a0788ddb9dd9
- SHA512 5d0f64e4ad954e289b27c89babfec050aedaa2a5bf5496e17c117946aabed305ca083e7265c093fa212151d6ffc8e5241d0abc58cf401d33ab6594c8de190eb0
- SSDEEP 393216:DAkLRCR3R7R6RLRKRcRWRtR1RdRsRMRJRwRnRoRS:EU
- TLSH T1B717C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-22_159a51ce9673850ec3b66a46603c6730_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_159a51ce9673850ec3b66a46603c6730_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_159a51ce9673850ec3b66a46603c6730_coinminer_glassworm_poet-rat_sliver_snatch
- Size 18.2MB
- SHA256 c5894c5055dad167bdbec03f4964b93706f2e205bec10ccd22369fda05ee20af
- MD5 159a51ce9673850ec3b66a46603c6730
- SHA1 63a2d888c127bb1b0f81a4cef9b7a0788ddb9dd9
- SHA512 5d0f64e4ad954e289b27c89babfec050aedaa2a5bf5496e17c117946aabed305ca083e7265c093fa212151d6ffc8e5241d0abc58cf401d33ab6594c8de190eb0
- SSDEEP 393216:DAkLRCR3R7R6RLRKRcRWRtR1RdRsRMRJRwRnRoRS:EU
- TLSH T1B717C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory