General
- Target 2026-11-10_11c88dc9d698d80fe63a51523e47e188_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.7MB
- Sample261110-lpnl1aws7p
- SHA256 339c2a6037b81d500ff20c3090be3e9b7ee0d67a03dff7f24e7172ad6b70f9c7
- MD5 11c88dc9d698d80fe63a51523e47e188
- SHA1 004744515c7f1fb4ebca6e622ee064045ef6528f
- SHA512 228a605ab8c2586179ea7acb0d18d23d48bac904896e3af3d548e59467f78ed1e7ad8a93c99887dc8c1759fb4f8164ffaf81ea504b03afe66176f84bac9c266f
- SSDEEP 196608:mbDkZphgT73KxRyfCfShR7hRhhRDhRqhRghR1hRphRChRShRJhRE:wABcRNRrRlR+RcR3RjRmR2RDRE
- TLSH T113E6BF32B7E445AEC2BFE275C06217216EB2B4375336FB8B5E8049E91D13BD0A919353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-10_11c88dc9d698d80fe63a51523e47e188_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_11c88dc9d698d80fe63a51523e47e188_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_11c88dc9d698d80fe63a51523e47e188_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.7MB
- SHA256 339c2a6037b81d500ff20c3090be3e9b7ee0d67a03dff7f24e7172ad6b70f9c7
- MD5 11c88dc9d698d80fe63a51523e47e188
- SHA1 004744515c7f1fb4ebca6e622ee064045ef6528f
- SHA512 228a605ab8c2586179ea7acb0d18d23d48bac904896e3af3d548e59467f78ed1e7ad8a93c99887dc8c1759fb4f8164ffaf81ea504b03afe66176f84bac9c266f
- SSDEEP 196608:mbDkZphgT73KxRyfCfShR7hRhhRDhRqhRghR1hRphRChRShRJhRE:wABcRNRrRlR+RcR3RjRmR2RDRE
- TLSH T113E6BF32B7E445AEC2BFE275C06217216EB2B4375336FB8B5E8049E91D13BD0A919353
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables referencing virtualization MAC addresses
Adds Run key to start application
Drops desktop.ini file(s)
Drops file in System32 directory