2026-10-01_1be3a43ebf7da7d34c1091491d5997ac_coinminer_glassworm_poet-rat_sliver_snatch

General

Target
2026-10-01_1be3a43ebf7da7d34c1091491d5997ac_coinminer_glassworm_poet-rat_sliver_snatch
Size 19.0MB
Sample261002-xklsdswcjd
SHA256 96c20b8ad7934a087bf0b87dc12c887c43a291bcded1c85dff95b01a1d780330
MD5 1be3a43ebf7da7d34c1091491d5997ac
SHA1 be46b15d4965dadb034ea156a14552ec37802832
SHA512 5935872627a2691cf21aa46d00ec269ace36d44d5d8766d9779bbf465d1d2dca069e1146c2c7c952ca2b91959ed1bd639bab8e10bf2744eb50bf18bf701af617
SSDEEP 393216:DAkLRCR3R7R6uRmRXRYRiRTRMRYRmRsRPRaRVRhRzR1:EN
TLSH
T10517CF31B7E849AAC2FFD379D06206261EF0B827622AEB4F5E8054FD1D53BD09915363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables referencing virtualization MAC addresses 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_1be3a43ebf7da7d34c1091491d5997ac_coinminer_glassworm_poet-rat_sliver_snatch

2026-10-01_1be3a43ebf7da7d34c1091491d5997ac_coinminer_glassworm_poet-rat_sliver_snatch

.exe 19.0MB

SHA256 96c20b8ad7934a087bf0b87dc12c887c43a291bcded1c85dff95b01a1d780330
MD5 1be3a43ebf7da7d34c1091491d5997ac
SHA1 be46b15d4965dadb034ea156a14552ec37802832
SHA512 5935872627a2691cf21aa46d00ec269ace36d44d5d8766d9779bbf465d1d2dca069e1146c2c7c952ca2b91959ed1bd639bab8e10bf2744eb50bf18bf701af617
SSDEEP 393216:DAkLRCR3R7R6uRmRXRYRiRTRMRYRmRsRPRaRVRhRzR1:EN
TLSH
T10517CF31B7E849AAC2FFD379D06206261EF0B827622AEB4F5E8054FD1D53BD09915363
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

363296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths