2026-10-26_58b533c0bc9246fa032f1427ae32cb57_coinminer_glassworm_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_58b533c0bc9246fa032f1427ae32cb57_coinminer_glassworm_snatch
Size 4.5MB
Sample261027-vb858ats4m
SHA256 bde8975e4b5a662d27e7bef7b46416e6cbcba6e9fbdd9706377a91e3d7523ac1
MD5 58b533c0bc9246fa032f1427ae32cb57
SHA1 d51253f33fd0e4e7146c44366fbe0cc4520c53f0
SHA512 342d1a9f96c8cc45ebd9ae3b36efc29f6af3b48289266bacf66877b485a57e6f4f1e3006810d988edb3a6fc456e5d12dd0453e4cd00fe0e2ef782bbdfea63ed4
SSDEEP 49152:5m3fxxwekDw5lKoIZz35yZhtSMQy9rrtDXJf+mySpDocMXRRrpuTDc:5mP7PGVi8DXDp
TLSH
T159263917ECA914E9C0AED1318A7695267B317C881B3123D72B60FA382F77BD19DB9314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_58b533c0bc9246fa032f1427ae32cb57_coinminer_glassworm_snatch

File Explorer

2026-10-26_58b533c0bc9246fa032f1427ae32cb57_coinminer_glassworm_snatch

.exe 4.5MB

2026-10-26_58b533c0bc9246fa032f1427ae32cb57_coinminer_glassworm_snatch

IMPHASH 673e9f4d8330ff310ff17ae5ab5624c8
SHA256 bde8975e4b5a662d27e7bef7b46416e6cbcba6e9fbdd9706377a91e3d7523ac1
MD5 58b533c0bc9246fa032f1427ae32cb57
SHA1 d51253f33fd0e4e7146c44366fbe0cc4520c53f0
SHA512 342d1a9f96c8cc45ebd9ae3b36efc29f6af3b48289266bacf66877b485a57e6f4f1e3006810d988edb3a6fc456e5d12dd0453e4cd00fe0e2ef782bbdfea63ed4
SSDEEP 49152:5m3fxxwekDw5lKoIZz35yZhtSMQy9rrtDXJf+mySpDocMXRRrpuTDc:5mP7PGVi8DXDp
TLSH
T159263917ECA914E9C0AED1318A7695267B317C881B3123D72B60FA382F77BD19DB9314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

580928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

161KB

Virtual Size

32.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-10-26_58b533c0bc9246fa032f1427ae32cb57_coinminer_glassworm_snatch

kernel32

generic