General
- Target 2026-08-23_15498427c1cfc5c6f4389cdc488e111b_coinminer_glassworm_poet-rat_sliver_snatch
- Size 23.5MB
- Sample260824-t9brya1bnf
- SHA256 fb0ac6e71f9362c092757b4396a3d8eb496c05eedff9de19f9be7debafbbc4a0
- MD5 15498427c1cfc5c6f4389cdc488e111b
- SHA1 1b1e828cb83977a6eff338e3bf953033e9100cdd
- SHA512 db714eadd306e1cf1f8c0f26f3e7f59652ecaea27e88a17ba5afb33972158b2f64f8ee689c8db533c2a09c929b0d63af196e1b25bd962b55200cfe28716eb0a6
- SSDEEP 393216:v/HNRBR/RORXRURXR/ROR8R/RXRGRORuRXR/R/RFRWRuR/RXRuROR/R/RZ:3+
- TLSH T14647BF31B7E84AAAC2EFD379D06206261FF1F427622BEB4F5D8444FA1D53B909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_15498427c1cfc5c6f4389cdc488e111b_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_15498427c1cfc5c6f4389cdc488e111b_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_15498427c1cfc5c6f4389cdc488e111b_coinminer_glassworm_poet-rat_sliver_snatch
- Size 23.5MB
- SHA256 fb0ac6e71f9362c092757b4396a3d8eb496c05eedff9de19f9be7debafbbc4a0
- MD5 15498427c1cfc5c6f4389cdc488e111b
- SHA1 1b1e828cb83977a6eff338e3bf953033e9100cdd
- SHA512 db714eadd306e1cf1f8c0f26f3e7f59652ecaea27e88a17ba5afb33972158b2f64f8ee689c8db533c2a09c929b0d63af196e1b25bd962b55200cfe28716eb0a6
- SSDEEP 393216:v/HNRBR/RORXRURXR/ROR8R/RXRGRORuRXR/R/RFRWRuR/RXRuROR/R/RZ:3+
- TLSH T14647BF31B7E84AAAC2EFD379D06206261FF1F427622BEB4F5D8444FA1D53B909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)