2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch
Size 4.2MB
Sample261027-df4ymaaz8n
SHA256 9cd956e6bf366903e09ccc200b0fb51a398761937cd4fceebcd1e2965cab17ad
MD5 eea669d5d125966f13f41410cafbf291
SHA1 8771c4adcd3d378efe426a587d7d20d6a9882f17
SHA512 6f0934f2c4b2ca9d778fd063da003a8dd8f69dd98c91cfbece86b410ce7ae6d1ece6d9d124a9e1b3b8943f412b4a1c0412c4d0cc845cba13692c91d77dcfc361
SSDEEP 49152:ITqBtp2GaB3swPCF2/gQKekDccNbG0upqnXVyYA5LCfpYlc:IT6MxxUwLmfp
TLSH
T14C164B17FCA518E6C4AED1318966A1537B717C881F2123E72B50B6382F77BD0AEB9344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch

File Explorer

2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch

.exe 4.2MB

2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch

IMPHASH 673e9f4d8330ff310ff17ae5ab5624c8
SHA256 9cd956e6bf366903e09ccc200b0fb51a398761937cd4fceebcd1e2965cab17ad
MD5 eea669d5d125966f13f41410cafbf291
SHA1 8771c4adcd3d378efe426a587d7d20d6a9882f17
SHA512 6f0934f2c4b2ca9d778fd063da003a8dd8f69dd98c91cfbece86b410ce7ae6d1ece6d9d124a9e1b3b8943f412b4a1c0412c4d0cc845cba13692c91d77dcfc361
SSDEEP 49152:ITqBtp2GaB3swPCF2/gQKekDccNbG0upqnXVyYA5LCfpYlc:IT6MxxUwLmfp
TLSH
T14C164B17FCA518E6C4AED1318966A1537B717C881F2123E72B50B6382F77BD0AEB9344
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

573088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

190KB

Virtual Size

32.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-10-26_eea669d5d125966f13f41410cafbf291_coinminer_glassworm_snatch

kernel32

generic