2026-10-21_7c4cc96322b1adc29d99537ffd6347bb_coinminer_glassworm_poet-rat_sliver_snatch

General

Target
2026-10-21_7c4cc96322b1adc29d99537ffd6347bb_coinminer_glassworm_poet-rat_sliver_snatch
Size 18.8MB
Sample261022-y26dsshx8p
SHA256 e3798114f812641de3f840d11e0017c8657b762db7e57e0eb89fd1e6406a701a
MD5 7c4cc96322b1adc29d99537ffd6347bb
SHA1 e0327b8bab507dd570f411a8635cb2103ec5367a
SHA512 b03d8090ea2b3563a112d4c702fd0f118703d19ff5c09683a7cac69cc1d6551fddf9efd65c7c837940c5f108e9a660283da5df1ac3439864c5a872c0404a0575
SSDEEP 393216:DAkLRLRxRYRERURbRJRsRlRyRzRDRDR4RDR5RbR+Rm:Ec
TLSH
T10A17CF31B7E849AAC2BFD379D06206261EF0B827622BEB4F5E8054FD1D53BD09915363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables referencing virtualization MAC addresses 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_7c4cc96322b1adc29d99537ffd6347bb_coinminer_glassworm_poet-rat_sliver_snatch

2026-10-21_7c4cc96322b1adc29d99537ffd6347bb_coinminer_glassworm_poet-rat_sliver_snatch

.exe 18.8MB

SHA256 e3798114f812641de3f840d11e0017c8657b762db7e57e0eb89fd1e6406a701a
MD5 7c4cc96322b1adc29d99537ffd6347bb
SHA1 e0327b8bab507dd570f411a8635cb2103ec5367a
SHA512 b03d8090ea2b3563a112d4c702fd0f118703d19ff5c09683a7cac69cc1d6551fddf9efd65c7c837940c5f108e9a660283da5df1ac3439864c5a872c0404a0575
SSDEEP 393216:DAkLRLRxRYRERURbRJRsRlRyRzRDRDR4RDR5RbR+Rm:Ec
TLSH
T10A17CF31B7E849AAC2BFD379D06206261EF0B827622BEB4F5E8054FD1D53BD09915363
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

363296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths