General
- Target 2026-08-24_97b9e1cbf3ca0dfe807c619f2b3e8343_coinminer_glassworm_poet-rat_sliver_snatch
- Size 25.6MB
- Sample260825-hr7acafj2t
- SHA256 34c9a0019adffac1ab00784e84f99e4c632853fab6d14c98c0161174c9334578
- MD5 97b9e1cbf3ca0dfe807c619f2b3e8343
- SHA1 36dfd26a96517c628999ba22d9f39dd46e9738be
- SHA512 51eb1de8d213bc9572f3d314d6ca4a3c6bdc6198835887f1bd8ede7d9c342f1157b69aa67e1a00b79a723e5b6124053152598479c0a9669859a683e3ac6a71d8
- SSDEEP 393216:b/HNRBR/RORXRURXR/ROR8R/RXRNRaR/R/RmR/RXRyRmRXRORxRXRHR/ROR/R+RR:Ly
- TLSH T12D47BF2177E84AAAC2EFD37AE07206261FF1F527622BEB4F5D8444FA1D437909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_97b9e1cbf3ca0dfe807c619f2b3e8343_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_97b9e1cbf3ca0dfe807c619f2b3e8343_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_97b9e1cbf3ca0dfe807c619f2b3e8343_coinminer_glassworm_poet-rat_sliver_snatch
- Size 25.6MB
- SHA256 34c9a0019adffac1ab00784e84f99e4c632853fab6d14c98c0161174c9334578
- MD5 97b9e1cbf3ca0dfe807c619f2b3e8343
- SHA1 36dfd26a96517c628999ba22d9f39dd46e9738be
- SHA512 51eb1de8d213bc9572f3d314d6ca4a3c6bdc6198835887f1bd8ede7d9c342f1157b69aa67e1a00b79a723e5b6124053152598479c0a9669859a683e3ac6a71d8
- SSDEEP 393216:b/HNRBR/RORXRURXR/ROR8R/RXRNRaR/R/RmR/RXRyRmRXRORxRXRHR/ROR/R+RR:Ly
- TLSH T12D47BF2177E84AAAC2EFD37AE07206261FF1F527622BEB4F5D8444FA1D437909911363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Drops desktop.ini file(s)