2026-09-19_8a239d62445f9e3f881704a27f6e4e5f_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_rex_salatstealer_sliver_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-19_8a239d62445f9e3f881704a27f6e4e5f_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_rex_salatstealer_sliver_snatch
Size 15.7MB
Sample260919-msskssec39
SHA256 61924e26bc835c027811fc5091ceffab505f1c489e22f85978d1c67be5f498b5
MD5 8a239d62445f9e3f881704a27f6e4e5f
SHA1 fb748555f02c85db0a39580219a7f51b225484e6
SHA512 312df4ea94115643a17acdac2a7c7dfd29ec1aa1e472ca74f985c83ae3961fe20d675708bccaf667aaa92617246a0aafd92b014b2b8d58ddd257518fcfa014f1
SSDEEP 196608:Ay1yndwF4GPmbyBmaH/inViyPu+/fkhHw:ArndwFRoWH/iI4u+/8hQ
TLSH
T1C0F68D03E8A144E8C0AAD135C9669263BB717C495B3023DB3F65F7242FB6BD06EB9750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-19_8a239d62445f9e3f881704a27f6e4e5f_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_rex_salatstealer_sliver_snatch

File Explorer

2026-09-19_8a239d62445f9e3f881704a27f6e4e5f_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_rex_salatstealer_sliver_snatch

.exe 15.7MB

2026-09-19_8a239d62445f9e3f881704a27f6e4e5f_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_rex_salatstealer_sliver_snatch

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 61924e26bc835c027811fc5091ceffab505f1c489e22f85978d1c67be5f498b5
MD5 8a239d62445f9e3f881704a27f6e4e5f
SHA1 fb748555f02c85db0a39580219a7f51b225484e6
SHA512 312df4ea94115643a17acdac2a7c7dfd29ec1aa1e472ca74f985c83ae3961fe20d675708bccaf667aaa92617246a0aafd92b014b2b8d58ddd257518fcfa014f1
SSDEEP 196608:Ay1yndwF4GPmbyBmaH/inViyPu+/fkhHw:ArndwFRoWH/iI4u+/8hQ
TLSH
T1C0F68D03E8A144E8C0AAD135C9669263BB717C495B3023DB3F65F7242FB6BD06EB9750
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

529888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

9.6MB

Virtual Size

9.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

805KB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

125KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

111KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

68KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

2026-09-19_8a239d62445f9e3f881704a27f6e4e5f_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_rex_salatstealer_sliver_snatch

kernel32

generic