2026-08-20_bcb7e8be57826475c9d87553a42dbde7_cloudeye_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

resource
2026-08-20_bcb7e8be57826475c9d87553a42dbde7_cloudeye_cobalt-strike_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

IMPHASH f0ea7b7844bbc5bfa9bb32efdcea957c
SHA256 2f80b7b64c84a2e924f7d9851d9c420d6e9bfacb4759587fd7f95498e0a0fb6a
MD5 bcb7e8be57826475c9d87553a42dbde7
SHA1 57fb8f10a0c99968e4b1a40d9dcd45c3c27662b0
SHA512 145aa78d3b861b6d1e4ef5dce2b304c9f525808d38e983d8325671148df29f848cb9f5a48c2d967eec560bbc854166637dea38db0f5e23a8226cc56e4f2e0efd
SSDEEP 1572864:0qG8WNeWaJzY4RFXyxO9HAdKtVn+ww25XpFSH:tG8WN1uzY4RFCIPn+QhpFS
TLSH
T1A5D72207F89155A4C4EED230CA669262BA717C985B3023D72B60F7B82F73BD45EB9314
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

419968

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54.0MB

Virtual Size

54.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

236KB

Virtual Size

608KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

.data

SHA256 76d159639096ba5d9e51df4fe5dd93f48b23a51d0dc9e8522285b46a120787ad
MD5 519482e23bd8c6c0bf048f225b551c6a
SHA1 f4cd7c437bac4bc7d51a212e3c93fec92245017e
SHA512 750e231ec21139da317d76e5f607a44aead6992ba3f576c213d52218ef02130125794c0c16707662c617ce8ffad31465185b7e2bbaca49ecba871e7c8d27bd27
SSDEEP 3072:brTJZvEe/rmRVJXjCpj8O1WxRtxKDXphlcwZ1:brTDH+VNCpIO16Kb
TLSH
T1A634D647F5418DEACEA501704CD6F3B12376A669EA0743732A296728FCCF3640F99C96
MD5 SHA1 SHA512 SSDEEP TLSH

.idata

SHA256 da3bb336e7e11f92b9fb31dfd85d6e580135ea3192a37a9f8db25efd2a6c9cef
MD5 0d2962518048ad31aa4f7e1fcbcb9262
SHA1 9360611bf2cf66374d6e7a1ac728690ce75d5d38
SHA512 7c35ed150e248a216eb2209b32ac6cccd178338e8a4cd417ab361558641365dc26670ed1e3cca3fc9a30a011999a5413b1fa1a3a8063e1e7b89086574e086426
TLSH
T14E31F0FD7E08C9C3DEB53A34498188128FD1F96A042AE673408D9E5F785F09880BD361
MD5 SHA1 SHA512 TLSH

.rdata

SHA256 ff8298f8ba0d872aaae64f8f7d2e3dcaf013e63a1bc87d1bc5baaf1bd259c0e3
MD5 be28401992e5b525f1bd84e6699f5e9b
SHA1 cbacd77bf2e60cc0e3cc949fb514d7a4562949fc
SHA512 e1bf670f92487401171e5d4b9067497cc7f5855afffd66ae70edb72620174bd63541524a90b5ec053f4fbab78760467b78429926ee167f81e8e1c96c31a4544d
SSDEEP 1572864:qqG8WNeWaJzY4RFXyxO9HAdKtVn+ww25XpFSH:zG8WN1uzY4RFCIPn+QhpFS
TLSH
T1E7C73306B9805EB9D89A533189A282D17B71BC945F2263C73A14F3BC2E737C49F76358
MD5 SHA1 SHA512 SSDEEP TLSH

.reloc

SHA256 14b66967d4613ccf3fae5b6f387bc286bd4cd203a1a00f404d7bcdc085c1a225
MD5 f323536b201738a4e74600274182b067
SHA1 41efc427d1f4f6fc2f440b6c89804e58a8756ab4
SHA512 5484b3d02600f7ec6f3fdc91cc88059eae093b634c8ac0ba2a53c15331d71f6a6cd9acf64131878f602d5c3304c2cc5109779509e7453eee5b7ca88834c7bb9b
SSDEEP 384:7Zh/Hd47Fzn+g4Zo6GxFUzUCpRjaq2XOHkRR+BcA0+kGp/95LDtaIPLc8bXwjdiD:nK7AgXXIkfCiQ1DxjfXHjFZWl
TLSH
T1AA03E82ED2270946CAD4D164E9BECD701DF63C79E23EDAAEF36B41689BC21162FD0414
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/GROUP_ICON/103

SHA256 4ced259d69ecb82dd7b89cefc30ae2806abb0b07bd6326e824e71f2b95aecc73
MD5 f1bc3e14d9cbf8d79bbb29152a4bacf8
SHA1 88dff4cb1a378ed82c149d9ed793a09ce922bb4d
SHA512 20b0590eb313d58c78916129c9262300bfb420a20ef8d83947ceaebb81c8dc29f9dffefe395c39c5439ff4ffbb37c50af321e46bdb5ee8d1678308c8438e2db3
MD5 SHA1 SHA512

.rsrc/ICON/1

SHA256 2eb45201e1df3d255f56112d101c083a5434d119b16dc8bb98cc8c31acb1b6ab
MD5 cfa249d098e3e8254223ff10d5e0c129
SHA1 67aac18826cc54054c38acaf6e15a925a15a9f40
SHA512 30d1fb5d8be6106ae8054d6e0fd4a049530b2c4197f19d739e7dfa618fdf78e09afba0d2badfa9cfa86e9d2530e46fab1b239a847a59ff2469edfef6389357e9
SSDEEP 384:SSuevxk/F+1yUHQhg9EKP+frv08Pj+o2XjGElnUqcU0pIxtr8oGQVFmYm:Sd6k/w1Ky9xPuvH+PXjGElU5f8tr8KVG
TLSH
T12A92D1EBB6BD8FA5D3A2C63D109DA98D7901DD6019AFC8F096B7B0400511818DFD2BF9
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/MANIFEST/1

SHA256 97d9168ab7ed15bc99cd4a0a3ef30197cc1c0d2613f2c8bb136aa0ac6e266270
MD5 71e6dc0a76c021a9fc19781a35d5955e
SHA1 504c882d8797328943082182fe6aa74530977fcf
SHA512 a9533bddadfcf76cbd80776602c4a76c50e8d9f0854f97082b9143dd0c2ef62d04408e259149fdfc8babe7124a8b921a42467acedfc47e631522d34fd74a3ce5
TLSH
T168114281D424E566E71202E73FB8F549157AA33B08CC47EDC4C19B7DB202A8B87221A1
MD5 SHA1 SHA512 TLSH

.rsrc/version.txt

SHA256 bfeed5bbfab27e4bebf9ea4732d9fc599d05981de9f57bab0be74f9f66815b81
MD5 20dcf8a3b0ccc882a3e99b79f82c9b54
SHA1 39c4897727d28b29ed4b9debf6499b5069a4f5e8
SHA512 8830b10e3332ff3e4a4b6fbe6fdbf85271e4711d601a17d1bd28a51341b51dbd78304574eeeddaaf62f12a3cb3fc64cdb3f31a8235a455e71abdea5387198b9e
TLSH
T1A821B11696FB3188A0A7AA894FEA8D3547233E50453D929E98CC7E4E4FD38411A127F7
MD5 SHA1 SHA512 TLSH

.symtab

SHA256 3e67f4a7d14b832ff2a2433e9cf0f6f5720821f67148a87c0ee2595a20c96c68
MD5 07b5472d347d42780469fb2654b7fc54
SHA1 943ae54f4818e52409fbbaf60ffd71318d966b0d
SHA512 521dff167892b2d4fe8f3008845386e08e2777ab7a6d5717a956b3337bf5442a11c01aca9e44e1602a83ad97b704faaa74e841c3c8e7d6e82d83833c52a9802f
MD5 SHA1 SHA512

.text

SHA256 5ed40b8ca944bc0d12e70041831f90ce75e6222d90e7816b093231e0ad99b39b
MD5 08aeef63f13711e7169e463ed8e339f5
SHA1 70fcfbee0b4500958eeb9455b49b3799e3feffc7
SHA512 2672a09c7374260ff206c3c5277aae00d72775cacdfd73f8d40a946d423461d4d58051cf80fbd61b662a43c19f9748bcb8b4000bc3f4b9603bb91d1a502a1c44
SSDEEP 49152:GsWzuYf3a1rb/TXvO90d7HjmAFd4A64nsfJLP+oRqkjaFI66fi2NuGu9h0:i3aWVgkj+p9
TLSH
T16DB5E847E89580E4C0EEE164C726A213FD6134D9073837E76FA19AF11B26FE4A6BD314
MD5 SHA1 SHA512 SSDEEP TLSH