2026-08-23_ac4dc1a26d7d13e20c1d3e87d970d28d_aurora_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
Classification: Malicious
2026-08-23_ac4dc1a26d7d13e20c1d3e87d970d28d_aurora_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch is…
Detection summary
- 34 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: HYDRAQ (S0203)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Aurora | Triage | 2026-08-24 01:46:54 | 2026-08-24 01:46:54 | malicious-activity | S0203 Hydraq |
Tags
aurora stealerSample information
- Filenames
- 2026-08-23_ac4dc1a26d7d13e20c1d3e87d970d28d_aurora_coinminer_dosia_frostygoop_glassworm_hive_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
- SHA-256
b954db4ab939549e1bb54aa421037b570a67821c8ddac2e3e2c0b81c5554ab49- First indexed
- 2026-08-24 01:46:54
- Last updated
- 2026-10-11 06:03:10
Antivirus detections
| Engine | Detection |
|---|---|
| AVG | Win64:MalwareX-gen [Pws] |
| AhnLab-V3 | Trojan/Win.Evo-gen.R570351 |
| Alibaba | Backdoor:JS/Meterpreter.22044d0d |
| Avast | Win64:MalwareX-gen [Pws] |
| Avira | TR/W64.MalwareX |
| Bkav | W32.Malware.5972D43D |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | WinGo/Agent.JS trojan |
| F-Secure | Trojan.TR/W64.MalwareX |
| Fortinet | W64/GoAgent.JS!tr |
| GData | Win64.Trojan.Agent.VVQ6P4 |
| Detected | |
| Jiangmin | Trojan.PSW.Agent.dct |
| Kaspersky | HEUR:Backdoor.Win64.Agent.gen |
| Lionic | Trojan.Win64.Coins.tseu |
| McAfeeD | ti!B954DB4AB939 |
| Microsoft | Trojan:Win32/AuroraStealer!pz |
| Paloalto | generic.ml |
| Rising | Stealer.Aurora!1.E1B6 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Artemis |
| Sophos | Troj/Aurora-A |
| Symantec | Trojan.Gen.MBT |
| Tencent | Win32.Trojan-QQPass.QQRob.Hplw |
| Trapmine | suspicious.low.ml.score |
| Varist | W64/GoAgent.A.gen!Eldorado |
| VirIT | Trojan.Win64.Agent.PT |
| Webroot | W32.Trojan.Genkd |
| ZoneAlarm | Troj/Aurora-A |
| alibabacloud | Trojan[Spy]:Win/Babar.Gen |
| huorong | TrojanSpy/Agent.hf |