2026-10-16_6889b65b52994c296031e4d35c3ca1c6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-16_6889b65b52994c296031e4d35c3ca1c6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
Size 12.7MB
Sample261017-s2bljaff76
SHA256 d5f9b8a951acf311269fccb4f2ed6e4674449a3e304815ed6257e320dedbeb37
MD5 6889b65b52994c296031e4d35c3ca1c6
SHA1 1b99513b7d648e929150a682de5b8058c82e4be1
SHA512 f67e07b07abffc2741e5998df06ab815f3d4d0d8161897e3bb05a44c35bfcaccfa858b6ed8cea421bcd992521aef5bebdbd331ce9e98570e08ac9ecaa6c59183
SSDEEP 98304:oKMoMLZcpZE/Pn3NGNHoPy3beqBnZlmOj6EGRGNNK/zFEYDBvIdj:oN9p/P3NGNiyaq1ZspEUMoaIp8
TLSH
T19FD65A57EC6545E9D0EAD1308A769253BBB17C494B3023DB6B60F3242F72BE09EB9350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_6889b65b52994c296031e4d35c3ca1c6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

File Explorer

2026-10-16_6889b65b52994c296031e4d35c3ca1c6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

.exe 12.7MB

2026-10-16_6889b65b52994c296031e4d35c3ca1c6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 d5f9b8a951acf311269fccb4f2ed6e4674449a3e304815ed6257e320dedbeb37
MD5 6889b65b52994c296031e4d35c3ca1c6
SHA1 1b99513b7d648e929150a682de5b8058c82e4be1
SHA512 f67e07b07abffc2741e5998df06ab815f3d4d0d8161897e3bb05a44c35bfcaccfa858b6ed8cea421bcd992521aef5bebdbd331ce9e98570e08ac9ecaa6c59183
SSDEEP 98304:oKMoMLZcpZE/Pn3NGNHoPy3beqBnZlmOj6EGRGNNK/zFEYDBvIdj:oN9p/P3NGNiyaq1ZspEUMoaIp8
TLSH
T19FD65A57EC6545E9D0EAD1308A769253BBB17C494B3023DB6B60F3242F72BE09EB9350
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

530400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.9MB

Virtual Size

5.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

568KB

Virtual Size

920KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

142KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

600KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-10-16_6889b65b52994c296031e4d35c3ca1c6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

kernel32

generic