General
- Target 2026-10-22_9b4570cee7bb66dceaa7d23ada4cfbc5_coinminer_glassworm_poet-rat_sliver_snatch
- Size 18.2MB
- Sample261024-dvk43afv2y
- SHA256 8fd5d1e03e252236198be2335d93532969f6a089c24acdd99195ea8e1d765506
- MD5 9b4570cee7bb66dceaa7d23ada4cfbc5
- SHA1 9e1c1ac8dd908f1e9782f58812860d559602f853
- SHA512 5eff2970933197226efebfbb98835f4126dfcb17f66a7ffb838fec9ba4a2dd7e6e39012e2321bc3ad2768c34244683da6607b5b16ecf24d96b26d23e93e12a8f
- SSDEEP 393216:DAkLRCR3R7R6RLRKRcRWRhRGR9RkReR7RzRAR/Rp:Ef
- TLSH T12A17C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-22_9b4570cee7bb66dceaa7d23ada4cfbc5_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_9b4570cee7bb66dceaa7d23ada4cfbc5_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_9b4570cee7bb66dceaa7d23ada4cfbc5_coinminer_glassworm_poet-rat_sliver_snatch
- Size 18.2MB
- SHA256 8fd5d1e03e252236198be2335d93532969f6a089c24acdd99195ea8e1d765506
- MD5 9b4570cee7bb66dceaa7d23ada4cfbc5
- SHA1 9e1c1ac8dd908f1e9782f58812860d559602f853
- SHA512 5eff2970933197226efebfbb98835f4126dfcb17f66a7ffb838fec9ba4a2dd7e6e39012e2321bc3ad2768c34244683da6607b5b16ecf24d96b26d23e93e12a8f
- SSDEEP 393216:DAkLRCR3R7R6RLRKRcRWRhRGR9RkReR7RzRAR/Rp:Ef
- TLSH T12A17C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables referencing virtualization MAC addresses
Adds Run key to start application
Drops desktop.ini file(s)
Drops file in System32 directory