2026-10-10_3901582a86406cb1c080cb246eabb8d3_coinminer_glassworm_poet-rat_sliver_snatch

General

Target
2026-10-10_3901582a86406cb1c080cb246eabb8d3_coinminer_glassworm_poet-rat_sliver_snatch
Size 15.0MB
Sample261011-vbzlsadf69
SHA256 08e9106520d21f7e09638da06321bbb5c4ce4e7765c0df5cfec5b409ecce7c2b
MD5 3901582a86406cb1c080cb246eabb8d3
SHA1 688ca61f4f1a184d6bdf4efb7f794d72f888d1a5
SHA512 aa2d5f9bf84b005224394000addeefd3448a4692c1f2d1a7a190d9e42c1d2d53c0deb8b4786e306f3c945b0194526afab3c8383c6328491f74cbc93863f765db
SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRfhRkhRB:/s/cRLRBR4R+RlR8R9RbRXRTRpR4RB
TLSH
T103F6B022B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables referencing virtualization MAC addresses 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_3901582a86406cb1c080cb246eabb8d3_coinminer_glassworm_poet-rat_sliver_snatch

2026-10-10_3901582a86406cb1c080cb246eabb8d3_coinminer_glassworm_poet-rat_sliver_snatch

.exe 15.0MB

SHA256 08e9106520d21f7e09638da06321bbb5c4ce4e7765c0df5cfec5b409ecce7c2b
MD5 3901582a86406cb1c080cb246eabb8d3
SHA1 688ca61f4f1a184d6bdf4efb7f794d72f888d1a5
SHA512 aa2d5f9bf84b005224394000addeefd3448a4692c1f2d1a7a190d9e42c1d2d53c0deb8b4786e306f3c945b0194526afab3c8383c6328491f74cbc93863f765db
SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRHhRkhRqhRDhRAhRrhRRhRVhRZhRfhRkhRB:/s/cRLRBR4R+RlR8R9RbRXRTRpR4RB
TLSH
T103F6B022B7E449AEC2FFD375D06206212EF1B8675326EB8B5F8045F91D53BD0A919323
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

363296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths