General
- Target 2026-08-23_eef45781004fb75cda5cd93c27de67e3_coinminer_glassworm_poet-rat_sliver_snatch
- Size 22.3MB
- Sample260823-tp24dshp3s
- SHA256 d893bf9ca4b6dec7a61897e3ede23b64b8afa94d26045c0511fd1733badaa796
- MD5 eef45781004fb75cda5cd93c27de67e3
- SHA1 204f379bf99d38a3e2f5a13c4f4fda7a5e1d2f89
- SHA512 1f4a2a29565515e5953a459b85ca3031168214ff5f129b32aea260a8fc6bf7aeea16b53cd4dac0b55f459e7e334c42569d2f1db6f5f5793a6b53da40d7c753e7
- SSDEEP 393216:v/HNRBR/RORXRURXR/RORXRRR/R/RgRWR/RRRWRxRFRXRXRXRuRXRZ:3+
- TLSH T15737BF31B7E84AAAC2EFD379D07206261FF1B427622BEB4F5D8444FA1D53B909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_eef45781004fb75cda5cd93c27de67e3_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_eef45781004fb75cda5cd93c27de67e3_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_eef45781004fb75cda5cd93c27de67e3_coinminer_glassworm_poet-rat_sliver_snatch
- Size 22.3MB
- SHA256 d893bf9ca4b6dec7a61897e3ede23b64b8afa94d26045c0511fd1733badaa796
- MD5 eef45781004fb75cda5cd93c27de67e3
- SHA1 204f379bf99d38a3e2f5a13c4f4fda7a5e1d2f89
- SHA512 1f4a2a29565515e5953a459b85ca3031168214ff5f129b32aea260a8fc6bf7aeea16b53cd4dac0b55f459e7e334c42569d2f1db6f5f5793a6b53da40d7c753e7
- SSDEEP 393216:v/HNRBR/RORXRURXR/RORXRRR/R/RgRWR/RRRWRxRFRXRXRXRuRXRZ:3+
- TLSH T15737BF31B7E84AAAC2EFD379D07206261FF1B427622BEB4F5D8444FA1D53B909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)