General
- Target 2026-09-01_77ee7514f351835b9ac02f908073cd2a_coinminer_glassworm_poet-rat_sliver_snatch
- Size 17.3MB
- Sample260903-ljpbcaem7s
- SHA256 8fefc4112284f0326c4932d120415e349659b9f416d64a53b784c3cfdc74015e
- MD5 77ee7514f351835b9ac02f908073cd2a
- SHA1 0bc3d1402d38c15a63bf77a0588a53ada0146d63
- SHA512 d89c207004b41a80100eeb7ded9556f6a503c1c92f04ab455ceddb7f828075a52559b6d8d0f4009b2a141b01d060bd590dd8cafa29075e3c3eb384b3c2e3bc0a
- SSDEEP 393216:DAkLRCR3R7R6RxRQR6RQRyRPRnRpRGROR2R8Rv:Es
- TLSH T1C907C031B7E849AAC2BFD375D06206222EF1B8276326EB8F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-01_77ee7514f351835b9ac02f908073cd2a_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-01_77ee7514f351835b9ac02f908073cd2a_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_77ee7514f351835b9ac02f908073cd2a_coinminer_glassworm_poet-rat_sliver_snatch
- Size 17.3MB
- SHA256 8fefc4112284f0326c4932d120415e349659b9f416d64a53b784c3cfdc74015e
- MD5 77ee7514f351835b9ac02f908073cd2a
- SHA1 0bc3d1402d38c15a63bf77a0588a53ada0146d63
- SHA512 d89c207004b41a80100eeb7ded9556f6a503c1c92f04ab455ceddb7f828075a52559b6d8d0f4009b2a141b01d060bd590dd8cafa29075e3c3eb384b3c2e3bc0a
- SSDEEP 393216:DAkLRCR3R7R6RxRQR6RQRyRPRnRpRGROR2R8Rv:Es
- TLSH T1C907C031B7E849AAC2BFD375D06206222EF1B8276326EB8F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory