General
- Target 2026-11-09_655d2890f911b10367a3fe5463fa2d4c_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.7MB
- Sample261110-v67wmscs4y
- SHA256 dc2085ff5ff8d7b133fc3c2552d139809f2a449190d8322b38076e89dca923bc
- MD5 655d2890f911b10367a3fe5463fa2d4c
- SHA1 0912acd8f4c8f58db1eb01b5b92c988bb83a6c39
- SHA512 5488694683f20d774a7cd3c5d27fb23826af6f902792dd2e5aec49e173633bec6d4737c860b1b2f2ca03871bff59790a2a48cfe97bd60f766ad53601b3e0685f
- SSDEEP 196608:mbDkZphgT73KxRyfCfShR7hRhhRDhRqhRghR1hR/hROhR4hRkhRa:wABcRNRrRlR+RcR3RJRqRER4Ra
- TLSH T134E6BF32B7E445AEC2BFE275C06217216EB2B4375336FB8B5E8049E91D13BD0A919353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-09_655d2890f911b10367a3fe5463fa2d4c_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_655d2890f911b10367a3fe5463fa2d4c_coinminer_glassworm_poet-rat_sliver_snatch.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_655d2890f911b10367a3fe5463fa2d4c_coinminer_glassworm_poet-rat_sliver_snatch
- Size 13.7MB
- SHA256 dc2085ff5ff8d7b133fc3c2552d139809f2a449190d8322b38076e89dca923bc
- MD5 655d2890f911b10367a3fe5463fa2d4c
- SHA1 0912acd8f4c8f58db1eb01b5b92c988bb83a6c39
- SHA512 5488694683f20d774a7cd3c5d27fb23826af6f902792dd2e5aec49e173633bec6d4737c860b1b2f2ca03871bff59790a2a48cfe97bd60f766ad53601b3e0685f
- SSDEEP 196608:mbDkZphgT73KxRyfCfShR7hRhhRDhRqhRghR1hR/hROhR4hRkhRa:wABcRNRrRlR+RcR3RJRqRER4Ra
- TLSH T134E6BF32B7E445AEC2BFE275C06217216EB2B4375336FB8B5E8049E91D13BD0A919353
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables referencing virtualization MAC addresses
Adds Run key to start application
Drops desktop.ini file(s)
Drops file in System32 directory