General
- Target 2026-11-03_785417d1f5387aa84261a1841e15ecfd_coinminer_glassworm_poet-rat_sliver_snatch
- Size 14.0MB
- Sample261104-tzfcdadh88
- SHA256 fcf3f97ca2ccc8bb5342fd9058d3c9f53813cc3dcd764b57e89cc1a1feec7995
- MD5 785417d1f5387aa84261a1841e15ecfd
- SHA1 6da3f0adb78c1b38f037ec5f622fb3c30a944b3c
- SHA512 f43d3b3aa43a769503d0fd16e6df2ae56cc31b938d6bf25b86d99ed5679a758d854775a0aada622f9c52b41f8212a436fe46a1a61ca83edb0aeaadb12fae7c80
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRnhRchRihRbhRYhRohR+hRihR4hRx:/s/cRLRhRARGRtRkR0RaRGRERx
- TLSH T144E6BF22B7E449AAC2FFD274D06206217EB1B8675326FB8B5F8045F91D63BD0AD19313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-03_785417d1f5387aa84261a1841e15ecfd_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_785417d1f5387aa84261a1841e15ecfd_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_785417d1f5387aa84261a1841e15ecfd_coinminer_glassworm_poet-rat_sliver_snatch
- Size 14.0MB
- SHA256 fcf3f97ca2ccc8bb5342fd9058d3c9f53813cc3dcd764b57e89cc1a1feec7995
- MD5 785417d1f5387aa84261a1841e15ecfd
- SHA1 6da3f0adb78c1b38f037ec5f622fb3c30a944b3c
- SHA512 f43d3b3aa43a769503d0fd16e6df2ae56cc31b938d6bf25b86d99ed5679a758d854775a0aada622f9c52b41f8212a436fe46a1a61ca83edb0aeaadb12fae7c80
- SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRnhRchRihRbhRYhRohR+hRihR4hRx:/s/cRLRhRARGRtRkR0RaRGRERx
- TLSH T144E6BF22B7E449AAC2FFD274D06206217EB1B8675326FB8B5F8045F91D63BD0AD19313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory