General
- Target 2026-10-10_0bf99f495b9f829a7371444b76139902_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.1MB
- Sample261011-1lbwcsds71
- SHA256 601c43f3c91a8d7dffe275636d1813702947cd53798a6d0f1a77a7694a0a1456
- MD5 0bf99f495b9f829a7371444b76139902
- SHA1 46dc2833f1a2de06cae55afbeb634de753f78e8f
- SHA512 dbfdb15de9401cb452dd2535bc4c6a4596b0adfd821c49363ffa3758718281d34815f117659a89ad9f548e93c4973a7d321514cbb73e4efa5843399d1ba830b8
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhREhRNhRjhRBhRa:/s/cRLRBR4R+RlR8R9RbRYRfRFRLRa
- TLSH T1D3F6C022B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-10_0bf99f495b9f829a7371444b76139902_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_0bf99f495b9f829a7371444b76139902_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_0bf99f495b9f829a7371444b76139902_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.1MB
- SHA256 601c43f3c91a8d7dffe275636d1813702947cd53798a6d0f1a77a7694a0a1456
- MD5 0bf99f495b9f829a7371444b76139902
- SHA1 46dc2833f1a2de06cae55afbeb634de753f78e8f
- SHA512 dbfdb15de9401cb452dd2535bc4c6a4596b0adfd821c49363ffa3758718281d34815f117659a89ad9f548e93c4973a7d321514cbb73e4efa5843399d1ba830b8
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhREhRNhRjhRBhRa:/s/cRLRBR4R+RlR8R9RbRYRfRFRLRa
- TLSH T1D3F6C022B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory