General
- Target 2026-10-01_1be3a43ebf7da7d34c1091491d5997ac_coinminer_glassworm_poet-rat_sliver_snatch
- Size 19.0MB
- Sample261002-xklsdswcjd
- SHA256 96c20b8ad7934a087bf0b87dc12c887c43a291bcded1c85dff95b01a1d780330
- MD5 1be3a43ebf7da7d34c1091491d5997ac
- SHA1 be46b15d4965dadb034ea156a14552ec37802832
- SHA512 5935872627a2691cf21aa46d00ec269ace36d44d5d8766d9779bbf465d1d2dca069e1146c2c7c952ca2b91959ed1bd639bab8e10bf2744eb50bf18bf701af617
- SSDEEP 393216:DAkLRCR3R7R6uRmRXRYRiRTRMRYRmRsRPRaRVRhRzR1:EN
- TLSH T10517CF31B7E849AAC2FFD379D06206261EF0B827622AEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-01_1be3a43ebf7da7d34c1091491d5997ac_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_1be3a43ebf7da7d34c1091491d5997ac_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_1be3a43ebf7da7d34c1091491d5997ac_coinminer_glassworm_poet-rat_sliver_snatch
- Size 19.0MB
- SHA256 96c20b8ad7934a087bf0b87dc12c887c43a291bcded1c85dff95b01a1d780330
- MD5 1be3a43ebf7da7d34c1091491d5997ac
- SHA1 be46b15d4965dadb034ea156a14552ec37802832
- SHA512 5935872627a2691cf21aa46d00ec269ace36d44d5d8766d9779bbf465d1d2dca069e1146c2c7c952ca2b91959ed1bd639bab8e10bf2744eb50bf18bf701af617
- SSDEEP 393216:DAkLRCR3R7R6uRmRXRYRiRTRMRYRmRsRPRaRVRhRzR1:EN
- TLSH T10517CF31B7E849AAC2FFD379D06206261EF0B827622AEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory