2026-11-01_946fe02d372cff6cae346f36ad20b5ae_coinminer_glassworm_poet-rat_sliver_snatch

General

Target
2026-11-01_946fe02d372cff6cae346f36ad20b5ae_coinminer_glassworm_poet-rat_sliver_snatch
Size 13.8MB
Sample261102-rwqb3acy5m
SHA256 b5938acd435e43d1e18423de26734ca013bd7bd2ab05bbd902efdc5148965f0f
MD5 946fe02d372cff6cae346f36ad20b5ae
SHA1 8427b09be16c366b7c314587c16ea0888f7b84ed
SHA512 09c59041f8ea0caec8b25ba93ab62a787ae617d7defabe5b6e513d7de21fb621f8a996867b071582358ea67cf126b59adffaa02232d2b4724c76f68c81b05242
SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRnhRchRihRbhRYhRuhRRhRPhRihRS:/s/cRLRhRARGRtRkRKRbRZRGRS
TLSH
T164E6BF32B7E449AAC2FFD274D06206217EB1B8675326EB8B5F8045F91D63BD0AD19313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

Detects executables referencing virtualization MAC addresses 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_VM_Evasion_MACAddrComb

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_946fe02d372cff6cae346f36ad20b5ae_coinminer_glassworm_poet-rat_sliver_snatch

2026-11-01_946fe02d372cff6cae346f36ad20b5ae_coinminer_glassworm_poet-rat_sliver_snatch

.exe 13.8MB

SHA256 b5938acd435e43d1e18423de26734ca013bd7bd2ab05bbd902efdc5148965f0f
MD5 946fe02d372cff6cae346f36ad20b5ae
SHA1 8427b09be16c366b7c314587c16ea0888f7b84ed
SHA512 09c59041f8ea0caec8b25ba93ab62a787ae617d7defabe5b6e513d7de21fb621f8a996867b071582358ea67cf126b59adffaa02232d2b4724c76f68c81b05242
SSDEEP 196608:2wAlDycg3oBbqsATtThRBhRnhRchRihRbhRYhRuhRRhRPhRihRS:/s/cRLRhRARGRtRkRKRbRZRGRS
TLSH
T164E6BF32B7E449AAC2FFD274D06206217EB1B8675326EB8B5F8045F91D63BD0AD19313
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

363296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths