General
- Target 2026-11-03_5c1157ebd9c354a50ad576fb6058f4d8_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.7MB
- Sample261104-ybyahaee76
- SHA256 39b5ae82b821814279fb448c98c32f0a09221544011b8c33f92496be003ac523
- MD5 5c1157ebd9c354a50ad576fb6058f4d8
- SHA1 a511ae60ebbc7bf7bd0071b23ead26e08fca023f
- SHA512 25f71000c80711bec70e9ca8bd0874c2d56610e4328a2f0a05261db6bb722b6c84ff63a8c7e4cd676105a55a973624fa8d751d8db8b441ff8049d6727ae60243
- SSDEEP 196608:mbDkZphgT73KxRyfCfShR7hRhhRDhRqhRghR1hR/hROhR4hRkhRF:wABcRNRrRlR+RcR3RJRqRER4RF
- TLSH T145E6BF32B7E445AEC2BFE275C06217216EB2B4375336FB8B5E8049E91D13BD0A919353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-03_5c1157ebd9c354a50ad576fb6058f4d8_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_5c1157ebd9c354a50ad576fb6058f4d8_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_5c1157ebd9c354a50ad576fb6058f4d8_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.7MB
- SHA256 39b5ae82b821814279fb448c98c32f0a09221544011b8c33f92496be003ac523
- MD5 5c1157ebd9c354a50ad576fb6058f4d8
- SHA1 a511ae60ebbc7bf7bd0071b23ead26e08fca023f
- SHA512 25f71000c80711bec70e9ca8bd0874c2d56610e4328a2f0a05261db6bb722b6c84ff63a8c7e4cd676105a55a973624fa8d751d8db8b441ff8049d6727ae60243
- SSDEEP 196608:mbDkZphgT73KxRyfCfShR7hRhhRDhRqhRghR1hR/hROhR4hRkhRF:wABcRNRrRlR+RcR3RJRqRER4RF
- TLSH T145E6BF32B7E445AEC2BFE275C06217216EB2B4375336FB8B5E8049E91D13BD0A919353
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables referencing virtualization MAC addresses
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory