2026-08-22_cee4f4064037f066bfb5167173a68add_coinminer_glassworm_poet-rat_sliver_snatch

General

Target
2026-08-22_cee4f4064037f066bfb5167173a68add_coinminer_glassworm_poet-rat_sliver_snatch
Size 18.7MB
Sample260823-ac7csscq8t
SHA256 4b760ab5df620ae9e73d667c30b24278d930107fde7699fbbf087b0413469cea
MD5 cee4f4064037f066bfb5167173a68add
SHA1 baddb6529a6219e7a9b42819d4d6d31c628c3cd6
SHA512 de7841607ea6ee1880428efa05c3bd841b8dc8c55941c590905c68cd712e100eafd6b6df1f781607b9f19baba3857b11cf285d16c914798b3bc58b45e355c721
SSDEEP 393216:DAkLRCR3R7R6RLRKRRR1RzR3RWR+R8RURPROR1R1Rn:EC
TLSH
T1DD17C031B7E849AAC2BFD379D06206261EF0B827632AEB4F5E8054FD1D53BD09915363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables referencing virtualization MAC addresses 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_cee4f4064037f066bfb5167173a68add_coinminer_glassworm_poet-rat_sliver_snatch

2026-08-22_cee4f4064037f066bfb5167173a68add_coinminer_glassworm_poet-rat_sliver_snatch

.exe 18.7MB

SHA256 4b760ab5df620ae9e73d667c30b24278d930107fde7699fbbf087b0413469cea
MD5 cee4f4064037f066bfb5167173a68add
SHA1 baddb6529a6219e7a9b42819d4d6d31c628c3cd6
SHA512 de7841607ea6ee1880428efa05c3bd841b8dc8c55941c590905c68cd712e100eafd6b6df1f781607b9f19baba3857b11cf285d16c914798b3bc58b45e355c721
SSDEEP 393216:DAkLRCR3R7R6RLRKRRR1RzR3RWR+R8RURPROR1R1Rn:EC
TLSH
T1DD17C031B7E849AAC2BFD379D06206261EF0B827632AEB4F5E8054FD1D53BD09915363
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

363296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths