General
- Target 2026-10-13_eb2b6d449645ffd86d5f335cb580ced1_coinminer_glassworm_poet-rat_sliver_snatch
- Size 20.5MB
- Sample261014-cs56saxtbz
- SHA256 202ff852862eaa1972be2004731480ac5738a63dac92c5e221bdd0d1c1d9ef14
- MD5 eb2b6d449645ffd86d5f335cb580ced1
- SHA1 a4faffd4b1ee7822322f27924fdaa1837fb05434
- SHA512 43deee72017be4f05b34f2244dd120d27b052d17d661fa7f163b97fedbe5e70dd7de8f0dc208250733d8b448068319a3ac8cf44776b6b901cb372d72a471474d
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcR0RMR5RuRYRcR+RqRUR2R7RfR+:EE
- TLSH T18C27CF31B7E849AAC2BFD379D06206261EF0B827622BEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-13_eb2b6d449645ffd86d5f335cb580ced1_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_eb2b6d449645ffd86d5f335cb580ced1_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_eb2b6d449645ffd86d5f335cb580ced1_coinminer_glassworm_poet-rat_sliver_snatch
- Size 20.5MB
- SHA256 202ff852862eaa1972be2004731480ac5738a63dac92c5e221bdd0d1c1d9ef14
- MD5 eb2b6d449645ffd86d5f335cb580ced1
- SHA1 a4faffd4b1ee7822322f27924fdaa1837fb05434
- SHA512 43deee72017be4f05b34f2244dd120d27b052d17d661fa7f163b97fedbe5e70dd7de8f0dc208250733d8b448068319a3ac8cf44776b6b901cb372d72a471474d
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcR0RMR5RuRYRcR+RqRUR2R7RfR+:EE
- TLSH T18C27CF31B7E849AAC2BFD379D06206261EF0B827622BEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory