General
- Target 2026-10-10_4a30a9d5ed5cc0aa550d6eab30c18146_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.0MB
- Sample261011-sdctpas1gy
- SHA256 2f1acba0c4a2c373a688bdaf610d14e9dd48cc056ac584b7e03b9e67a3d8df6d
- MD5 4a30a9d5ed5cc0aa550d6eab30c18146
- SHA1 469578ad33f1b0e560eebbe9c4379a6ec703f034
- SHA512 79692f501c601c3dad8b4f26af97923dfcd2c7b57a608ff7b8918ada422b61e0807516caa7216f014f63a5448a64bf66424234d28ee88598cbd93971b6416f31
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhREhRNhRUhRbhRK:/s/cRLRBR4R+RlR8R9RbRYRfRoRtRK
- TLSH T14CF6B022B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-10_4a30a9d5ed5cc0aa550d6eab30c18146_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_4a30a9d5ed5cc0aa550d6eab30c18146_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_4a30a9d5ed5cc0aa550d6eab30c18146_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.0MB
- SHA256 2f1acba0c4a2c373a688bdaf610d14e9dd48cc056ac584b7e03b9e67a3d8df6d
- MD5 4a30a9d5ed5cc0aa550d6eab30c18146
- SHA1 469578ad33f1b0e560eebbe9c4379a6ec703f034
- SHA512 79692f501c601c3dad8b4f26af97923dfcd2c7b57a608ff7b8918ada422b61e0807516caa7216f014f63a5448a64bf66424234d28ee88598cbd93971b6416f31
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhREhRNhRUhRbhRK:/s/cRLRBR4R+RlR8R9RbRYRfRoRtRK
- TLSH T14CF6B022B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory