General
- Target 2026-08-23_6e6634f608a69529a9752bb8e0e97abf_coinminer_glassworm_poet-rat_sliver_snatch
- Size 26.2MB
- Sample260824-lan9zsem3t
- SHA256 4845288f691de9d8279034f49f5b560e208582db0b41725ef82f7aaed5d86aef
- MD5 6e6634f608a69529a9752bb8e0e97abf
- SHA1 0bb0afff5b4b04d3917f0fe6617da24e60c050e5
- SHA512 2f9de7f2da52de43f880373c69c72331c403a3abf473057d21dc5831a2cf82f4ec8380c89b7845e15d6bccf5cf702416d384c4707e24eedbe37382094b444f04
- SSDEEP 393216:v/HNRBR/RORXRURXR/RXRjRqRXR/R/RORXRLRyRHR/R/RyR/RHRxRXRRR/R+R/R8:3t
- TLSH T10E57BF2177E84AAAC2EFD37AE07206261FF1F527622BEB4F5D8444FA1D437909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_6e6634f608a69529a9752bb8e0e97abf_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_6e6634f608a69529a9752bb8e0e97abf_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_6e6634f608a69529a9752bb8e0e97abf_coinminer_glassworm_poet-rat_sliver_snatch
- Size 26.2MB
- SHA256 4845288f691de9d8279034f49f5b560e208582db0b41725ef82f7aaed5d86aef
- MD5 6e6634f608a69529a9752bb8e0e97abf
- SHA1 0bb0afff5b4b04d3917f0fe6617da24e60c050e5
- SHA512 2f9de7f2da52de43f880373c69c72331c403a3abf473057d21dc5831a2cf82f4ec8380c89b7845e15d6bccf5cf702416d384c4707e24eedbe37382094b444f04
- SSDEEP 393216:v/HNRBR/RORXRURXR/RXRjRqRXR/R/RORXRLRyRHR/R/RyR/RHRxRXRRR/R+R/R8:3t
- TLSH T10E57BF2177E84AAAC2EFD37AE07206261FF1F527622BEB4F5D8444FA1D437909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)