General
- Target 2026-08-23_8ddcf3ac10fff0dc3c1c93c6d06e7edc_coinminer_glassworm_poet-rat_sliver_snatch
- Size 16.9MB
- Sample260824-gp4wrstbpb
- SHA256 6ea875f97a1d721d2e15e77d2d68e41e90f011fd95e4845e80fd0c94d82cceb5
- MD5 8ddcf3ac10fff0dc3c1c93c6d06e7edc
- SHA1 73fde3a8a51f065d4ceee148282921b68d098573
- SHA512 cfc55f809d790b25bc9401f85b97411b01c15e0bae76ca7c51c65d49c0ec5dc2a547a71c70a9794a303581d3644858bd58394285743da3c8483450406a2831ea
- SSDEEP 393216:v/HNR6RyRyRXRWRXR/R/R/RXRyR/RXRRRORORc:3P
- TLSH T12107BF32B7E84AAAC2BFD375D06246212EF1B4276327EB4F5E8444FA1D13BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_8ddcf3ac10fff0dc3c1c93c6d06e7edc_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_8ddcf3ac10fff0dc3c1c93c6d06e7edc_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_8ddcf3ac10fff0dc3c1c93c6d06e7edc_coinminer_glassworm_poet-rat_sliver_snatch
- Size 16.9MB
- SHA256 6ea875f97a1d721d2e15e77d2d68e41e90f011fd95e4845e80fd0c94d82cceb5
- MD5 8ddcf3ac10fff0dc3c1c93c6d06e7edc
- SHA1 73fde3a8a51f065d4ceee148282921b68d098573
- SHA512 cfc55f809d790b25bc9401f85b97411b01c15e0bae76ca7c51c65d49c0ec5dc2a547a71c70a9794a303581d3644858bd58394285743da3c8483450406a2831ea
- SSDEEP 393216:v/HNR6RyRyRXRWRXR/R/R/RXRyR/RXRRRORORc:3P
- TLSH T12107BF32B7E84AAAC2BFD375D06246212EF1B4276327EB4F5E8444FA1D13BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)