2026-10-22_02370656061cba9f11b36be2cabaae07_coinminer_glassworm_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_02370656061cba9f11b36be2cabaae07_coinminer_glassworm_snatch
Size 3.2MB
Sample261024-26xt1acy8w
SHA256 10aacce234ccaa814257bbbfce2af4af46d6d444fe8dd87c3984ccaa9a409270
MD5 02370656061cba9f11b36be2cabaae07
SHA1 ba8084fc213d2978ddf92652bb96fce845646005
SHA512 23f8340909698045d4f1de4a538e05c307da2918b75ce31b4f89531f7594a10a4ddb954186fd314468734a5cad1deb1c12f06dd1fc05dfec3e5bca2e2185d3a6
SSDEEP 49152:uO3Q51J2q1UVxZxvnm7IAQW1MNzW/BTqoAoa:uOkAe8+
TLSH
T132F56A07FCA918F6C2AEE1318966A9527B70BC480B3123D72F50B6782F76BD06D79714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects executables referencing many IR and analysis tools 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_References_SecTools

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_02370656061cba9f11b36be2cabaae07_coinminer_glassworm_snatch

File Explorer

2026-10-22_02370656061cba9f11b36be2cabaae07_coinminer_glassworm_snatch

.exe 3.2MB

2026-10-22_02370656061cba9f11b36be2cabaae07_coinminer_glassworm_snatch

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 10aacce234ccaa814257bbbfce2af4af46d6d444fe8dd87c3984ccaa9a409270
MD5 02370656061cba9f11b36be2cabaae07
SHA1 ba8084fc213d2978ddf92652bb96fce845646005
SHA512 23f8340909698045d4f1de4a538e05c307da2918b75ce31b4f89531f7594a10a4ddb954186fd314468734a5cad1deb1c12f06dd1fc05dfec3e5bca2e2185d3a6
SSDEEP 49152:uO3Q51J2q1UVxZxvnm7IAQW1MNzW/BTqoAoa:uOkAe8+
TLSH
T132F56A07FCA918F6C2AEE1318966A9527B70BC480B3123D72F50B6782F76BD06D79714
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Detects executables referencing many IR and analysis tools
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

550272

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

93KB

Virtual Size

32.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-10-22_02370656061cba9f11b36be2cabaae07_coinminer_glassworm_snatch

kernel32

generic