2026-10-10_4f24f53f36aa110250ce3ef9586f06e2_coinminer_glassworm_poet-rat_sliver_snatch

General

Target
2026-10-10_4f24f53f36aa110250ce3ef9586f06e2_coinminer_glassworm_poet-rat_sliver_snatch
Size 15.0MB
Sample261011-rr3rlabb88
SHA256 7720af307f1e1f8136cad3971d74e3e18931afae5d3f64b31ff76aca282fd4bb
MD5 4f24f53f36aa110250ce3ef9586f06e2
SHA1 7f2b50f4342077a305a31628f1af174266115264
SHA512 50fc55e6b7f9691b9601d9d9f84278570cee625110838f5ec7f0d72004aa13c9e6f9ab2cf0aa4594b8c16a0d8bdb97fb6fec5c14d9735b8d2ad56d885cecdf49
SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRxhRZhRJ:Ts/cRLRBR4R+RlR8R9RbRXRTR7RTRJ
TLSH
T14DF6BF22B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables referencing virtualization MAC addresses 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_4f24f53f36aa110250ce3ef9586f06e2_coinminer_glassworm_poet-rat_sliver_snatch

2026-10-10_4f24f53f36aa110250ce3ef9586f06e2_coinminer_glassworm_poet-rat_sliver_snatch

.exe 15.0MB

SHA256 7720af307f1e1f8136cad3971d74e3e18931afae5d3f64b31ff76aca282fd4bb
MD5 4f24f53f36aa110250ce3ef9586f06e2
SHA1 7f2b50f4342077a305a31628f1af174266115264
SHA512 50fc55e6b7f9691b9601d9d9f84278570cee625110838f5ec7f0d72004aa13c9e6f9ab2cf0aa4594b8c16a0d8bdb97fb6fec5c14d9735b8d2ad56d885cecdf49
SSDEEP 196608:CwAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRxhRZhRJ:Ts/cRLRBR4R+RlR8R9RbRXRTR7RTRJ
TLSH
T14DF6BF22B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

363296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths