General
- Target 2026-08-30_bbe75b546b449bc46f2c35b42deb614d_coinminer_glassworm_poet-rat_sliver_snatch
- Size 19.1MB
- Sample260831-gftdnswalg
- SHA256 184b43e48502b7ca26d40f80d3798956b79ad7d09a10ff801b84df7f8fbac428
- MD5 bbe75b546b449bc46f2c35b42deb614d
- SHA1 721efa8335203735141216c2f39afe00e3bc1ffa
- SHA512 7e3f704449a9e901211f73e283949ae00bfcfe84d28eef1f86d47f6c25873402d92e8f9cc482c6643b67b839bb9c4d034281a0b9eaf5a66e954cdaaead468786
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRhRaRvRIRqRXRjRKRPR7RF:Em
- TLSH T10917C031B7E849AAC2BFD379D06206261EF0B827622BEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-30_bbe75b546b449bc46f2c35b42deb614d_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_bbe75b546b449bc46f2c35b42deb614d_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_bbe75b546b449bc46f2c35b42deb614d_coinminer_glassworm_poet-rat_sliver_snatch
- Size 19.1MB
- SHA256 184b43e48502b7ca26d40f80d3798956b79ad7d09a10ff801b84df7f8fbac428
- MD5 bbe75b546b449bc46f2c35b42deb614d
- SHA1 721efa8335203735141216c2f39afe00e3bc1ffa
- SHA512 7e3f704449a9e901211f73e283949ae00bfcfe84d28eef1f86d47f6c25873402d92e8f9cc482c6643b67b839bb9c4d034281a0b9eaf5a66e954cdaaead468786
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcRhRaRvRIRqRXRjRKRPR7RF:Em
- TLSH T10917C031B7E849AAC2BFD379D06206261EF0B827622BEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory