2026-10-28_367192e813bea0f2a67e37855b84c4b3_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-28_367192e813bea0f2a67e37855b84c4b3_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
Size 15.1MB
Sample261030-hraalsdg67
SHA256 aab3be5305f0d32492f8c40b96598f0a898ffd82738da063e8c840362aec5061
MD5 367192e813bea0f2a67e37855b84c4b3
SHA1 0cf2c2af573f466b4feb6d9df42bd66243b20a71
SHA512 28cc639bb68fb57a713a57f1f229fb459c9ff0d65a5a19ab9c1f50a582bc5249684b2ed947c98587cf8af261a04f6f28b8debfdf1041dfa6bce92c40d331f59e
SSDEEP 98304:4/kCk+n6Pk+e2BOu2RLmTD4biTr39igVHFP/aQkgDV7YxFy8IFQcu6E+e:4B6PPe2BxDPZxaIxT4cm+e
TLSH
T1FDF64A43E8A505E5C1AAD535C6679213BB713C884F3063D72BA0F6382F72BE06EB9754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_367192e813bea0f2a67e37855b84c4b3_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

File Explorer

2026-10-28_367192e813bea0f2a67e37855b84c4b3_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

.exe 15.1MB

2026-10-28_367192e813bea0f2a67e37855b84c4b3_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 aab3be5305f0d32492f8c40b96598f0a898ffd82738da063e8c840362aec5061
MD5 367192e813bea0f2a67e37855b84c4b3
SHA1 0cf2c2af573f466b4feb6d9df42bd66243b20a71
SHA512 28cc639bb68fb57a713a57f1f229fb459c9ff0d65a5a19ab9c1f50a582bc5249684b2ed947c98587cf8af261a04f6f28b8debfdf1041dfa6bce92c40d331f59e
SSDEEP 98304:4/kCk+n6Pk+e2BOu2RLmTD4biTr39igVHFP/aQkgDV7YxFy8IFQcu6E+e:4B6PPe2BxDPZxaIxT4cm+e
TLSH
T1FDF64A43E8A505E5C1AAD535C6679213BB713C884F3063D72BA0F6382F72BE06EB9754
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

530112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

6.7MB

Virtual Size

6.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

7.2MB

Virtual Size

7.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

884KB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

168KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

122KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

2026-10-28_367192e813bea0f2a67e37855b84c4b3_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch

kernel32

generic