2026-07-30_fb82f9a1956c4e9a31e358b4ca8c1e61_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_fb82f9a1956c4e9a31e358b4ca8c1e61_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
Size 10.0MB
Sample260730-bc68gaap7s
SHA256 7b3f1fe92fc94fd49a063917a7acbece1b4d702203846bb4fe360bd360474002
MD5 fb82f9a1956c4e9a31e358b4ca8c1e61
SHA1 044ce5b89f9ceaa1afe81d4face94135ce077024
SHA512 61d0b4f390f4f38fe9a9f5bfb3f6cec7af6dd16db8b345919ecbaae85185ff9aea694fb7da03c5b1aaf4ad39bea42dc6f7eb57538bfd5105539dfd22908a43bf
SSDEEP 98304:ZXSr0L3SOBT8JHRKyZMdY4EQs51dZWtGKERce9dDIeRS8m7XdwIqON/OR9OoP+b5:hFBT8JEyZMduTr2e9dIdHP/OR/GhZ5S
TLSH
T19EB68C07E89504E9C5ADD335CA6293A3BA717C494B3263D72B50F7382F76BD0AA79340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_fb82f9a1956c4e9a31e358b4ca8c1e61_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

File Explorer

2026-07-30_fb82f9a1956c4e9a31e358b4ca8c1e61_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

.exe 10.0MB

2026-07-30_fb82f9a1956c4e9a31e358b4ca8c1e61_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 7b3f1fe92fc94fd49a063917a7acbece1b4d702203846bb4fe360bd360474002
MD5 fb82f9a1956c4e9a31e358b4ca8c1e61
SHA1 044ce5b89f9ceaa1afe81d4face94135ce077024
SHA512 61d0b4f390f4f38fe9a9f5bfb3f6cec7af6dd16db8b345919ecbaae85185ff9aea694fb7da03c5b1aaf4ad39bea42dc6f7eb57538bfd5105539dfd22908a43bf
SSDEEP 98304:ZXSr0L3SOBT8JHRKyZMdY4EQs51dZWtGKERce9dDIeRS8m7XdwIqON/OR9OoP+b5:hFBT8JEyZMduTr2e9dIdHP/OR/GhZ5S
TLSH
T19EB68C07E89504E9C5ADD335CA6293A3BA717C494B3263D72B50F7382F76BD0AA79340
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

479040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

364KB

Virtual Size

677KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

76KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

332B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

552KB

Virtual Size

551KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

118KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

57B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

711KB

Virtual Size

710KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/90

Size

206KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

63KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512KB

Virtual Size

512KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-07-30_fb82f9a1956c4e9a31e358b4ca8c1e61_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

kernel32

generic