General
- Target 2026-10-10_4f24f53f36aa110250ce3ef9586f06e2_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.0MB
- Sample261011-rr3rlabb88
- SHA256 7720af307f1e1f8136cad3971d74e3e18931afae5d3f64b31ff76aca282fd4bb
- MD5 4f24f53f36aa110250ce3ef9586f06e2
- SHA1 7f2b50f4342077a305a31628f1af174266115264
- SHA512 50fc55e6b7f9691b9601d9d9f84278570cee625110838f5ec7f0d72004aa13c9e6f9ab2cf0aa4594b8c16a0d8bdb97fb6fec5c14d9735b8d2ad56d885cecdf49
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRxhRZhRJ:Ts/cRLRBR4R+RlR8R9RbRXRTR7RTRJ
- TLSH T14DF6BF22B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-10_4f24f53f36aa110250ce3ef9586f06e2_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_4f24f53f36aa110250ce3ef9586f06e2_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_4f24f53f36aa110250ce3ef9586f06e2_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.0MB
- SHA256 7720af307f1e1f8136cad3971d74e3e18931afae5d3f64b31ff76aca282fd4bb
- MD5 4f24f53f36aa110250ce3ef9586f06e2
- SHA1 7f2b50f4342077a305a31628f1af174266115264
- SHA512 50fc55e6b7f9691b9601d9d9f84278570cee625110838f5ec7f0d72004aa13c9e6f9ab2cf0aa4594b8c16a0d8bdb97fb6fec5c14d9735b8d2ad56d885cecdf49
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRxhRZhRJ:Ts/cRLRBR4R+RlR8R9RbRXRTR7RTRJ
- TLSH T14DF6BF22B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory