General
- Target 2026-08-23_b58e98fdccbde24a9c77b25295f294bd_coinminer_glassworm_poet-rat_sliver_snatch
- Size 18.2MB
- Sample260824-almprabf68
- SHA256 961da50ed7d538b50eef819e7d59dec4d81575d5d0e4147805bebe4e45f4c398
- MD5 b58e98fdccbde24a9c77b25295f294bd
- SHA1 c8f934c594c4e357cb20c8d11c0d903017453a0b
- SHA512 8e6c1480d0e1e121885b942b3aba9db7c335949fb890ab74ce1065fc7fe57f370ba0068638d268f7493a60e25ac26050f6100e3d80b37c5aac687a1dc93fb71a
- SSDEEP 393216:DAkLRCR3R7R6RLRKRcRWRtR1RBRkR7RIRlRaRXRh:EU
- TLSH T10D17C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_b58e98fdccbde24a9c77b25295f294bd_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_b58e98fdccbde24a9c77b25295f294bd_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_b58e98fdccbde24a9c77b25295f294bd_coinminer_glassworm_poet-rat_sliver_snatch
- Size 18.2MB
- SHA256 961da50ed7d538b50eef819e7d59dec4d81575d5d0e4147805bebe4e45f4c398
- MD5 b58e98fdccbde24a9c77b25295f294bd
- SHA1 c8f934c594c4e357cb20c8d11c0d903017453a0b
- SHA512 8e6c1480d0e1e121885b942b3aba9db7c335949fb890ab74ce1065fc7fe57f370ba0068638d268f7493a60e25ac26050f6100e3d80b37c5aac687a1dc93fb71a
- SSDEEP 393216:DAkLRCR3R7R6RLRKRcRWRtR1RBRkR7RIRlRaRXRh:EU
- TLSH T10D17C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory