General
- Target 2026-08-30_d4a14396f7617661ef6807d308f1663c_coinminer_glassworm_poet-rat_sliver_snatch
- Size 16.7MB
- Sample260831-d88ghsthqd
- SHA256 5e4efd44b977477809e3b75fffa022698b83a45a81fda9583c0ff5a3326a95e5
- MD5 d4a14396f7617661ef6807d308f1663c
- SHA1 e426ffa16e34e4fe86e0eaf0070426d1474fdefe
- SHA512 39bfe44795d9183a0b3a525bf37733b2331499177b96b76464d171bcb915c260b69b846e9a03e7000c536086ca032800bb6bfe8d346acd6148811032d98e853f
- SSDEEP 393216:DAkLRLRxRYRERURbRiRdR6RuROR/RBRNRrRE:Ee
- TLSH T15C07CF31B7E849AAC2BFD375D06206222EF1B8276326FB8F5E8054F91D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-30_d4a14396f7617661ef6807d308f1663c_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_d4a14396f7617661ef6807d308f1663c_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_d4a14396f7617661ef6807d308f1663c_coinminer_glassworm_poet-rat_sliver_snatch
- Size 16.7MB
- SHA256 5e4efd44b977477809e3b75fffa022698b83a45a81fda9583c0ff5a3326a95e5
- MD5 d4a14396f7617661ef6807d308f1663c
- SHA1 e426ffa16e34e4fe86e0eaf0070426d1474fdefe
- SHA512 39bfe44795d9183a0b3a525bf37733b2331499177b96b76464d171bcb915c260b69b846e9a03e7000c536086ca032800bb6bfe8d346acd6148811032d98e853f
- SSDEEP 393216:DAkLRLRxRYRERURbRiRdR6RuROR/RBRNRrRE:Ee
- TLSH T15C07CF31B7E849AAC2BFD375D06206222EF1B8276326FB8F5E8054F91D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory