General
- Target 2026-10-22_3cb01ace491d3e52af65f18782613b61_coinminer_glassworm_poet-rat_sliver_snatch
- Size 17.9MB
- Sample261024-tgde3aay2x
- SHA256 9295873b89f2b6605c71fa240eca07b184eb1283ac6c0f1f8d2c642cd56590aa
- MD5 3cb01ace491d3e52af65f18782613b61
- SHA1 75416199e22f8d1882d06e3e4662ccff503dc433
- SHA512 5fb9d156b6fee298595e22b32fa4d7ec96881f5848fae40df26e04bde64833b6c3e8023cf4dc85832c7289958adb762dffb5938aaf1b4f2446aec38ac50c72f1
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRR1RARdRYRORfR3RRR0RtRP:E5
- TLSH T1AE17C031B7E849AAC2BFD379D06206222EF1B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-10-22_3cb01ace491d3e52af65f18782613b61_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_3cb01ace491d3e52af65f18782613b61_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_3cb01ace491d3e52af65f18782613b61_coinminer_glassworm_poet-rat_sliver_snatch
- Size 17.9MB
- SHA256 9295873b89f2b6605c71fa240eca07b184eb1283ac6c0f1f8d2c642cd56590aa
- MD5 3cb01ace491d3e52af65f18782613b61
- SHA1 75416199e22f8d1882d06e3e4662ccff503dc433
- SHA512 5fb9d156b6fee298595e22b32fa4d7ec96881f5848fae40df26e04bde64833b6c3e8023cf4dc85832c7289958adb762dffb5938aaf1b4f2446aec38ac50c72f1
- SSDEEP 393216:DAkLRCR3R7R6RLRKRRR1RARdRYRORfR3RRR0RtRP:E5
- TLSH T1AE17C031B7E849AAC2BFD379D06206222EF1B8276326EB4F5E8054FD1D53BD09915363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory