General
- Target 2026-10-08_231bacad1ec723eec1850b4afa47bb21_coinminer_glassworm_poet-rat_sliver_snatch
- Size 14.5MB
- Sample261009-xy3casea46
- SHA256 4905cc9e7780109ed38efb3a54314fd770252959c99b2cefb23721b57a9ed730
- MD5 231bacad1ec723eec1850b4afa47bb21
- SHA1 dc4155205366261634a883af17ff0fb3a0983c1e
- SHA512 cab61f268d23a8830724e527e475f6aaed7bbec347657b67b54d7a4f0c925bf4ecce0608e78b69e1919a6975e579c7b5c0f8134ea343708475e9644ccb9eea9e
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRNhRb:Ts/cRLRBR4R+RlR8R9RbRXRTRfRb
- TLSH T1B4E6CF22B7E449AEC2FFD275D06206213EB1B8675326EB8B5F8045F91D53BD0AD19323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-08_231bacad1ec723eec1850b4afa47bb21_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_231bacad1ec723eec1850b4afa47bb21_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_231bacad1ec723eec1850b4afa47bb21_coinminer_glassworm_poet-rat_sliver_snatch
- Size 14.5MB
- SHA256 4905cc9e7780109ed38efb3a54314fd770252959c99b2cefb23721b57a9ed730
- MD5 231bacad1ec723eec1850b4afa47bb21
- SHA1 dc4155205366261634a883af17ff0fb3a0983c1e
- SHA512 cab61f268d23a8830724e527e475f6aaed7bbec347657b67b54d7a4f0c925bf4ecce0608e78b69e1919a6975e579c7b5c0f8134ea343708475e9644ccb9eea9e
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRNhRb:Ts/cRLRBR4R+RlR8R9RbRXRTRfRb
- TLSH T1B4E6CF22B7E449AEC2FFD275D06206213EB1B8675326EB8B5F8045F91D53BD0AD19323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory