General
- Target 2026-08-25_c7c16ce0c0af15c04f3897b6729b3964_coinminer_glassworm_poet-rat_sliver_snatch
- Size 17.4MB
- Sample260826-lyltrsttbs
- SHA256 4dcfd73c2d415acb5406790b3e30435ab5e144e390b13a4b0729c7197114aee8
- MD5 c7c16ce0c0af15c04f3897b6729b3964
- SHA1 bbdde91a8be56bcfca7e15014a51500d2a13847f
- SHA512 aabc22fa905519f185ff28f43da7b78d70403a783a04d112eac1ff0da72aa8c3fc8c072a9d41aa9ae1d13b5425a99d1cf28ab2259a4a4cabab4d4c46518efb34
- SSDEEP 393216:DAkLRCR3R7R6RLRKRcRWRtRURNRLRPRTRKRTRr:El
- TLSH T12007CF31B7E849AAC2BFD375D06206222EF1B8276326EB8F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-25_c7c16ce0c0af15c04f3897b6729b3964_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_c7c16ce0c0af15c04f3897b6729b3964_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_c7c16ce0c0af15c04f3897b6729b3964_coinminer_glassworm_poet-rat_sliver_snatch
- Size 17.4MB
- SHA256 4dcfd73c2d415acb5406790b3e30435ab5e144e390b13a4b0729c7197114aee8
- MD5 c7c16ce0c0af15c04f3897b6729b3964
- SHA1 bbdde91a8be56bcfca7e15014a51500d2a13847f
- SHA512 aabc22fa905519f185ff28f43da7b78d70403a783a04d112eac1ff0da72aa8c3fc8c072a9d41aa9ae1d13b5425a99d1cf28ab2259a4a4cabab4d4c46518efb34
- SSDEEP 393216:DAkLRCR3R7R6RLRKRcRWRtRURNRLRPRTRKRTRr:El
- TLSH T12007CF31B7E849AAC2BFD375D06206222EF1B8276326EB8F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory