General
- Target 2026-09-10_577cd605a21894f286697370e6ad1615_coinminer_glassworm_poet-rat_sliver_snatch
- Size 14.7MB
- Sample260910-t6epesvvgz
- SHA256 a38e36fc36f40250114905cb6c0b66488b84213d1d5781ea82d06821ec974d78
- MD5 577cd605a21894f286697370e6ad1615
- SHA1 5b1d082b671f5c16f5bd34f2efe359e0dff2096d
- SHA512 61485623901b50c9aea44cbedd26cc00ba22044a1efb416cc5c31b28d72fa2df3bbd668483598fb4654050fbc1af14d09c59819542d9eb19e659da2c1b84c0ee
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRChRbhRthRphRihROhRVhRXhRuhRs:Ts/cRLRBRmRtR/RjRGRqRXRRRKRs
- TLSH T1B2F6CF22B7E449AEC2FFD275D06206213EB1B8675326EB8B5F8045F91D53BD0AD19323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-10_577cd605a21894f286697370e6ad1615_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_577cd605a21894f286697370e6ad1615_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_577cd605a21894f286697370e6ad1615_coinminer_glassworm_poet-rat_sliver_snatch
- Size 14.7MB
- SHA256 a38e36fc36f40250114905cb6c0b66488b84213d1d5781ea82d06821ec974d78
- MD5 577cd605a21894f286697370e6ad1615
- SHA1 5b1d082b671f5c16f5bd34f2efe359e0dff2096d
- SHA512 61485623901b50c9aea44cbedd26cc00ba22044a1efb416cc5c31b28d72fa2df3bbd668483598fb4654050fbc1af14d09c59819542d9eb19e659da2c1b84c0ee
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRChRbhRthRphRihROhRVhRXhRuhRs:Ts/cRLRBRmRtR/RjRGRqRXRRRKRs
- TLSH T1B2F6CF22B7E449AEC2FFD275D06206213EB1B8675326EB8B5F8045F91D53BD0AD19323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory