2026-10-14_8e354d2ee27818f00586669acbb593ba_coinminer_glassworm_poet-rat_sliver_snatch

General

Target
2026-10-14_8e354d2ee27818f00586669acbb593ba_coinminer_glassworm_poet-rat_sliver_snatch
Size 18.3MB
Sample261014-vgf2maft6l
SHA256 33c47649e08e4e314e484725ea8b66c995c8f089f985669b2a699abb5d4bb452
MD5 8e354d2ee27818f00586669acbb593ba
SHA1 ab7379bb0de45953df9d0a83080ce9e09790531c
SHA512 696e1e0fbadee779eaaa0165550a9f93cb4d33ed0b092337564bf2914ad52b2a181c866867a79ca5a80d7835de17fd32a92e123a7a7a107137d650b9d223785f
SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcR7RIRIR6RwR9RaRxRCRr:Es
TLSH
T1A217C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables referencing virtualization MAC addresses 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-14_8e354d2ee27818f00586669acbb593ba_coinminer_glassworm_poet-rat_sliver_snatch

2026-10-14_8e354d2ee27818f00586669acbb593ba_coinminer_glassworm_poet-rat_sliver_snatch

.exe 18.3MB

SHA256 33c47649e08e4e314e484725ea8b66c995c8f089f985669b2a699abb5d4bb452
MD5 8e354d2ee27818f00586669acbb593ba
SHA1 ab7379bb0de45953df9d0a83080ce9e09790531c
SHA512 696e1e0fbadee779eaaa0165550a9f93cb4d33ed0b092337564bf2914ad52b2a181c866867a79ca5a80d7835de17fd32a92e123a7a7a107137d650b9d223785f
SSDEEP 393216:DAkLRCR3R7R6RLRKRRRcR7RIRIR6RwR9RaRxRCRr:Es
TLSH
T1A217C031B7E849AAC2BFD379D06206262EF0B8276326EB4F5E8054FD1D53BD09915363
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

363296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths