General
- Target 2026-08-23_e485a9f88d20b20847e420dc2ffb0c96_coinminer_glassworm_poet-rat_sliver_snatch
- Size 25.0MB
- Sample260823-v16rdstth1
- SHA256 5047ce472c06b7269377d41d8db8d15e39ac36dbfef67201e2f10b59dba10c2e
- MD5 e485a9f88d20b20847e420dc2ffb0c96
- SHA1 33586e3f411de9d172509e42d85c07d13ca6ff80
- SHA512 80b188ee9c3fc0a50538b2538245b70fa53b234591081e23cabec66693c43ef5b3a81fd3b090dfa8349e3bc939dc39e1582fb72e9d76623e8f761464b4f46550
- SSDEEP 393216:v/HNRBR/RORXRURXR/ROR8R/RXRNRaR/R/RmR/RXRyRmRXRORxRHRuRXRRRXRN:3B
- TLSH T1E947BF2177E84AAAC2EFD37AE07206161FF1F427622BEB4F5D8444FA1D53B909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_e485a9f88d20b20847e420dc2ffb0c96_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_e485a9f88d20b20847e420dc2ffb0c96_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_e485a9f88d20b20847e420dc2ffb0c96_coinminer_glassworm_poet-rat_sliver_snatch
- Size 25.0MB
- SHA256 5047ce472c06b7269377d41d8db8d15e39ac36dbfef67201e2f10b59dba10c2e
- MD5 e485a9f88d20b20847e420dc2ffb0c96
- SHA1 33586e3f411de9d172509e42d85c07d13ca6ff80
- SHA512 80b188ee9c3fc0a50538b2538245b70fa53b234591081e23cabec66693c43ef5b3a81fd3b090dfa8349e3bc939dc39e1582fb72e9d76623e8f761464b4f46550
- SSDEEP 393216:v/HNRBR/RORXRURXR/ROR8R/RXRNRaR/R/RmR/RXRyRmRXRORxRHRuRXRRRXRN:3B
- TLSH T1E947BF2177E84AAAC2EFD37AE07206161FF1F427622BEB4F5D8444FA1D53B909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)