General
- Target 2026-11-01_bc0053913ffaab0e45254fc48b9237cb_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.1MB
- Sample261102-mble6aa19q
- SHA256 542cbc594ae2fdfdc139a4d11d0beb8a4e7456c46d83a29aa7cc5a22e73c874c
- MD5 bc0053913ffaab0e45254fc48b9237cb
- SHA1 9e60bb37a115ab30322cd13288074896e14ac613
- SHA512 f2d5436772cc9bc4259dc91070be5bd7516b97075f71fb09903616b93ccb8383026acc73aed5ffbd9272b72cf77b80a897ef02930dd7817e977686d0912550cb
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRnhRchRihRbhRYhRuhRRhRPhR9hRHhRWhRz:Ts/cRLRhRARGRtRkRKRbRZRPRBRCRz
- TLSH T1ABF6C022B7E849AEC2FFD375D06206212EF1B8675326EB8B5E8045F91D53BD09D19323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-01_bc0053913ffaab0e45254fc48b9237cb_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_bc0053913ffaab0e45254fc48b9237cb_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_bc0053913ffaab0e45254fc48b9237cb_coinminer_glassworm_poet-rat_sliver_snatch
- Size 15.1MB
- SHA256 542cbc594ae2fdfdc139a4d11d0beb8a4e7456c46d83a29aa7cc5a22e73c874c
- MD5 bc0053913ffaab0e45254fc48b9237cb
- SHA1 9e60bb37a115ab30322cd13288074896e14ac613
- SHA512 f2d5436772cc9bc4259dc91070be5bd7516b97075f71fb09903616b93ccb8383026acc73aed5ffbd9272b72cf77b80a897ef02930dd7817e977686d0912550cb
- SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRnhRchRihRbhRYhRuhRRhRPhR9hRHhRWhRz:Ts/cRLRhRARGRtRkRKRbRZRPRBRCRz
- TLSH T1ABF6C022B7E849AEC2FFD375D06206212EF1B8675326EB8B5E8045F91D53BD09D19323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory