General
- Target 2026-08-23_b3411b9ecb0b08b0bf28a83c4e1babb3_coinminer_glassworm_poet-rat_sliver_snatch
- Size 21.6MB
- Sample260824-a3ltsabr41
- SHA256 6b3d6f01638e7df0807c0fc8708ef5e023c0a0f116d9498f944230cb972556c5
- MD5 b3411b9ecb0b08b0bf28a83c4e1babb3
- SHA1 60b7ad02188b39ffc8212dd51cf32e534c04bca6
- SHA512 bd34d7717874f6a01e94f28311cdcb788e7b17146551fa18f4db7fc45d8ebe31ad2c1bfb4ec32e87471c62c608a4a3650a50a56a1fac62f8ed6b7cdf6dd94b8a
- SSDEEP 393216:v/HNRBR/RORXRURXR/ROR8R/RXRNRaR/R/RmR/RXRyRmRXRORfR5:3A
- TLSH T15E37CF31B7E84AAAC2EFD379D07206261FF1B427622BEB4F5D8444FA1D13B909915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_b3411b9ecb0b08b0bf28a83c4e1babb3_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_b3411b9ecb0b08b0bf28a83c4e1babb3_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_b3411b9ecb0b08b0bf28a83c4e1babb3_coinminer_glassworm_poet-rat_sliver_snatch
- Size 21.6MB
- SHA256 6b3d6f01638e7df0807c0fc8708ef5e023c0a0f116d9498f944230cb972556c5
- MD5 b3411b9ecb0b08b0bf28a83c4e1babb3
- SHA1 60b7ad02188b39ffc8212dd51cf32e534c04bca6
- SHA512 bd34d7717874f6a01e94f28311cdcb788e7b17146551fa18f4db7fc45d8ebe31ad2c1bfb4ec32e87471c62c608a4a3650a50a56a1fac62f8ed6b7cdf6dd94b8a
- SSDEEP 393216:v/HNRBR/RORXRURXR/ROR8R/RXRNRaR/R/RmR/RXRyRmRXRORfR5:3A
- TLSH T15E37CF31B7E84AAAC2EFD379D07206261FF1B427622BEB4F5D8444FA1D13B909915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)