General
- Target 2026-10-21_7c4cc96322b1adc29d99537ffd6347bb_coinminer_glassworm_poet-rat_sliver_snatch
- Size 18.8MB
- Sample261022-y26dsshx8p
- SHA256 e3798114f812641de3f840d11e0017c8657b762db7e57e0eb89fd1e6406a701a
- MD5 7c4cc96322b1adc29d99537ffd6347bb
- SHA1 e0327b8bab507dd570f411a8635cb2103ec5367a
- SHA512 b03d8090ea2b3563a112d4c702fd0f118703d19ff5c09683a7cac69cc1d6551fddf9efd65c7c837940c5f108e9a660283da5df1ac3439864c5a872c0404a0575
- SSDEEP 393216:DAkLRLRxRYRERURbRJRsRlRyRzRDRDR4RDR5RbR+Rm:Ec
- TLSH T10A17CF31B7E849AAC2BFD379D06206261EF0B827622BEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-21_7c4cc96322b1adc29d99537ffd6347bb_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_7c4cc96322b1adc29d99537ffd6347bb_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_7c4cc96322b1adc29d99537ffd6347bb_coinminer_glassworm_poet-rat_sliver_snatch
- Size 18.8MB
- SHA256 e3798114f812641de3f840d11e0017c8657b762db7e57e0eb89fd1e6406a701a
- MD5 7c4cc96322b1adc29d99537ffd6347bb
- SHA1 e0327b8bab507dd570f411a8635cb2103ec5367a
- SHA512 b03d8090ea2b3563a112d4c702fd0f118703d19ff5c09683a7cac69cc1d6551fddf9efd65c7c837940c5f108e9a660283da5df1ac3439864c5a872c0404a0575
- SSDEEP 393216:DAkLRLRxRYRERURbRJRsRlRyRzRDRDR4RDR5RbR+Rm:Ec
- TLSH T10A17CF31B7E849AAC2BFD379D06206261EF0B827622BEB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory