2026-08-08_0f94c22d353f86e0043ec05ab9ee0383_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_0f94c22d353f86e0043ec05ab9ee0383_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
Size 21.5MB
Sample260808-hes7yscc43
SHA256 1c71482160a75deb4dacab1d3c64b8a9ab04208c96cfa139fcb41bc07c800c84
MD5 0f94c22d353f86e0043ec05ab9ee0383
SHA1 10ef55f9aa7b9f1721cd680d8b9f5fea927c1baf
SHA512 a8ed251e8ced29c373ef49f62780cf9f857891cf8a0387e04024f31e97f2908417c32529efb1a73ac9037b0c029002120433682a85d0a9afd6d8878a81565455
SSDEEP 98304:Bygrp+ADIEqHOD0oerqGX/+huNXgkZMdq1ZbT/A/rVjwB17AklaEuQwidocg2Gp1:BRpILHODd+XW0VMm3HuQw+ZB
TLSH
T145376C86FA5320C5C45AA870942B500AE373F9142760D7FBEB9CE5E32EFD5D469327A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_0f94c22d353f86e0043ec05ab9ee0383_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

File Explorer

2026-08-08_0f94c22d353f86e0043ec05ab9ee0383_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

.exe 21.5MB

2026-08-08_0f94c22d353f86e0043ec05ab9ee0383_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 1c71482160a75deb4dacab1d3c64b8a9ab04208c96cfa139fcb41bc07c800c84
MD5 0f94c22d353f86e0043ec05ab9ee0383
SHA1 10ef55f9aa7b9f1721cd680d8b9f5fea927c1baf
SHA512 a8ed251e8ced29c373ef49f62780cf9f857891cf8a0387e04024f31e97f2908417c32529efb1a73ac9037b0c029002120433682a85d0a9afd6d8878a81565455
SSDEEP 98304:Bygrp+ADIEqHOD0oerqGX/+huNXgkZMdq1ZbT/A/rVjwB17AklaEuQwidocg2Gp1:BRpILHODd+XW0VMm3HuQw+ZB
TLSH
T145376C86FA5320C5C45AA870942B500AE373F9142760D7FBEB9CE5E32EFD5D469327A0
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

509184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

4.4MB

Virtual Size

4.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16.6MB

Virtual Size

16.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

363KB

Virtual Size

769KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

98KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

80KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-08-08_0f94c22d353f86e0043ec05ab9ee0383_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

kernel32

generic