General
- Target 2026-08-30_71ad1dee49d59ec70df76d241f3045ee_coinminer_glassworm_poet-rat_sliver_snatch
- Size 16.3MB
- Sample260831-lr59tszanb
- SHA256 1dc20a8ec6180941ed12fb677edccc62e4945f43b5356603d7c9529794810311
- MD5 71ad1dee49d59ec70df76d241f3045ee
- SHA1 7055b635e6f4119737cc80612e49a97a4dd1c719
- SHA512 3594577b947fb30e74fc2fce24f2bca0c6b2ec8a6f7f215c029894b7625d26fe158222b3a0302a7706ff6663fd51dd9f6192ad3af8ee9dcfcf9e7b52feb097a3
- SSDEEP 393216:DAkLRCR3R7R6RvR/RhR5RRRMRyRdRcR2R2RD:Ex
- TLSH T1CF07BF32B7E849AAC2BFD375D06206222EF1B8275326FB8F5E8055F91D53BD09915323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-30_71ad1dee49d59ec70df76d241f3045ee_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_71ad1dee49d59ec70df76d241f3045ee_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_71ad1dee49d59ec70df76d241f3045ee_coinminer_glassworm_poet-rat_sliver_snatch
- Size 16.3MB
- SHA256 1dc20a8ec6180941ed12fb677edccc62e4945f43b5356603d7c9529794810311
- MD5 71ad1dee49d59ec70df76d241f3045ee
- SHA1 7055b635e6f4119737cc80612e49a97a4dd1c719
- SHA512 3594577b947fb30e74fc2fce24f2bca0c6b2ec8a6f7f215c029894b7625d26fe158222b3a0302a7706ff6663fd51dd9f6192ad3af8ee9dcfcf9e7b52feb097a3
- SSDEEP 393216:DAkLRCR3R7R6RvR/RhR5RRRMRyRdRcR2R2RD:Ex
- TLSH T1CF07BF32B7E849AAC2BFD375D06206222EF1B8275326FB8F5E8055F91D53BD09915323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory