General
- Target 2026-08-30_f9c6656967bfca3c825d2b0fdb5465b7_coinminer_glassworm_poet-rat_sliver_snatch
- Size 17.9MB
- Sample260831-anpl5avvcy
- SHA256 29e2e4d14f4dd15cd15f9c47d2c0c2f6735ab4f76c85d4569aea9c70d5785619
- MD5 f9c6656967bfca3c825d2b0fdb5465b7
- SHA1 9f032c2a56b329d70a2d4bd37e722f14b2f67447
- SHA512 f079379907a5bc1e83c4f268b9af466c9c1992ea2b995a73d3b92edaed88974b7979724fbcdf72c7fcecf5aaf6ce367f5be5100259e9118943b751565b036903
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcR7RSRSRkRsRyRGRMRnRG:EE
- TLSH T15917CF31B7E849AAC2BFD379D06206222EF1B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-30_f9c6656967bfca3c825d2b0fdb5465b7_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_f9c6656967bfca3c825d2b0fdb5465b7_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_f9c6656967bfca3c825d2b0fdb5465b7_coinminer_glassworm_poet-rat_sliver_snatch
- Size 17.9MB
- SHA256 29e2e4d14f4dd15cd15f9c47d2c0c2f6735ab4f76c85d4569aea9c70d5785619
- MD5 f9c6656967bfca3c825d2b0fdb5465b7
- SHA1 9f032c2a56b329d70a2d4bd37e722f14b2f67447
- SHA512 f079379907a5bc1e83c4f268b9af466c9c1992ea2b995a73d3b92edaed88974b7979724fbcdf72c7fcecf5aaf6ce367f5be5100259e9118943b751565b036903
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcR7RSRSRkRsRyRGRMRnRG:EE
- TLSH T15917CF31B7E849AAC2BFD379D06206222EF1B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory