General
- Target 2026-10-10_3901582a86406cb1c080cb246eabb8d3_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.0MB
- Sample261011-vbzlsadf69
- SHA256 08e9106520d21f7e09638da06321bbb5c4ce4e7765c0df5cfec5b409ecce7c2b
- MD5 3901582a86406cb1c080cb246eabb8d3
- SHA1 688ca61f4f1a184d6bdf4efb7f794d72f888d1a5
- SHA512 aa2d5f9bf84b005224394000addeefd3448a4692c1f2d1a7a190d9e42c1d2d53c0deb8b4786e306f3c945b0194526afab3c8383c6328491f74cbc93863f765db
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRfhRkhRB:/s/cRLRBR4R+RlR8R9RbRXRTRpR4RB
- TLSH T103F6B022B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-10_3901582a86406cb1c080cb246eabb8d3_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_3901582a86406cb1c080cb246eabb8d3_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_3901582a86406cb1c080cb246eabb8d3_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.0MB
- SHA256 08e9106520d21f7e09638da06321bbb5c4ce4e7765c0df5cfec5b409ecce7c2b
- MD5 3901582a86406cb1c080cb246eabb8d3
- SHA1 688ca61f4f1a184d6bdf4efb7f794d72f888d1a5
- SHA512 aa2d5f9bf84b005224394000addeefd3448a4692c1f2d1a7a190d9e42c1d2d53c0deb8b4786e306f3c945b0194526afab3c8383c6328491f74cbc93863f765db
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRfhRkhRB:/s/cRLRBR4R+RlR8R9RbRXRTRpR4RB
- TLSH T103F6B022B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory