General
- Target 2026-08-23_ee7f2793fff8115122ded5a1807f4f6d_coinminer_glassworm_poet-rat_sliver_snatch
- Size 20.2MB
- Sample260823-trt6kaybjf
- SHA256 8c729c3d66d2454a0af03240def71aca76993aa94627dc04b76e9d21c5d51826
- MD5 ee7f2793fff8115122ded5a1807f4f6d
- SHA1 6fec2370e5942765b502d79f26fb9a06d1d62f52
- SHA512 ef76d05f821172d778fca92d35a0bf75540eb312d3dd448869a5d277ae37807d37bcfa2d2ca1b6a39af6c56d29ec50a16d6d2ad3a2455f904b896e18128f446c
- SSDEEP 393216:v/HNRBR/RORXRURXR/ROR8R/RXROR/RXRHRyR/RXRuRXROR6:3Y
- TLSH T19727BF31B7E84AAAC2FFD379D06206261FF1B427622BEB4F5D8444FA1D13B909915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_ee7f2793fff8115122ded5a1807f4f6d_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_ee7f2793fff8115122ded5a1807f4f6d_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_ee7f2793fff8115122ded5a1807f4f6d_coinminer_glassworm_poet-rat_sliver_snatch
- Size 20.2MB
- SHA256 8c729c3d66d2454a0af03240def71aca76993aa94627dc04b76e9d21c5d51826
- MD5 ee7f2793fff8115122ded5a1807f4f6d
- SHA1 6fec2370e5942765b502d79f26fb9a06d1d62f52
- SHA512 ef76d05f821172d778fca92d35a0bf75540eb312d3dd448869a5d277ae37807d37bcfa2d2ca1b6a39af6c56d29ec50a16d6d2ad3a2455f904b896e18128f446c
- SSDEEP 393216:v/HNRBR/RORXRURXR/ROR8R/RXROR/RXRHRyR/RXRuRXROR6:3Y
- TLSH T19727BF31B7E84AAAC2FFD379D06206261FF1B427622BEB4F5D8444FA1D13B909915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)