General

  • Target
    2026-05-28_f30b37b682ddf19d6b12302255ca99e0_coinminer_dosia_eternalromance_ghostlocker_glassworm_golang_helldown_luca-stealer_poet-rat_polyvice_quasar-rat
  • Size 40.7MB
  • Sample260528-dkvwhsgs21
  • SHA256 70b66e474a8a8414148416b20d22ef180fb5b4285061118220431e421a277eef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables referencing virtualization MAC addresses 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-05-28_f30b37b682ddf19d6b12302255ca99e0_coinminer_dosia_eternalromance_ghostlocker_glassworm_golang_helldown_luca-stealer_poet-rat_polyvice_quasar-rat
    .exe 40.7MB

2026-05-28_f30b37b682ddf19d6b12302255ca99e0_coinminer_dosia_eternalromance_ghostlocker_glassworm_golang_helldown_luca-stealer_poet-rat_polyvice_quasar-rat

  • IMPHASH fb6f8f7a26cccaf7522686edea75a41b
  • SHA256 70b66e474a8a8414148416b20d22ef180fb5b4285061118220431e421a277eef
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables referencing virtualization MAC addresses

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
a2:57:45:87:4d:01:7d:af:22:11:f0:90:48:a0:40:10:aa:6f:bd:3c:4d:dc:f1:52:ba:ce:f2:2d:0b:7d:36:4c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=2910210038137,CN=PT. VOSTRA INTERNASIONAL,OU=IT,O=PT. VOSTRA INTERNASIONAL,L=Kota Bekasi,ST=West Java,C=ID,1.3.6.1.4.1.311.60.2.1.3=#13024944,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains

Jan 1, 0001

Minor OS version
1
Major OS version
6
Entry point
5088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths