Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 06:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 1.9MB
- Sample260601-hppbraet2s
- SHA256 a04027f0c692a40108398e71ffec0289e26f6d33903b1de268be22ffcd5fd600
- MD5 cc831e5d3e12b06774d118246b361757
- SHA1 5aa8fd77c8ee75c18f297713a4e65c7fe7da685f
- SHA512 83f4475e46d8e8b4b069a446faa149a9098c7dd3551474a92bde466ccb76e2766f42ddf164350dfe560a4058f353a897d4793f02ec66ed25060ef13826e881a3
- SSDEEP 24576:WaeZD5IgDA0+FYhAqBQqd2qrJ8nIVc4WMtiePZ2Bele5IKDwDWO45ChQ:Waeh5jD8FmA5qHJ8n57MT1v
- TLSH T17B953847FCA249F6D4AAA271897261927B71BC441F3223D72EA0B3782F72BD05D78714
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\arrow-right.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\rhp_world_icon_hover.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\example_icons.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\digsig_icons.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\hi_contrast\core_icons_hiContrast_bow.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\example_icons.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\close.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\go-mobile-2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\email\adc_logo.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\icons_retina.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\print_poster.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_GB\excluded.txt.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoDev.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\images\themes\dark\file_icons.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\bg_pattern_RHP.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\reduced_mode-2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\LICENSE.txt.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\dd_arrow_small.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\themes\dark\sample-thumb.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\apple-touch-icon-114x114-precomposed.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Windows NT\TableTextService\TableTextServiceArray.txt.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\example_icons2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\new_icons.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\welcome.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\sat_logo_2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\flags.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\PDFSigQFormalRep.pdf.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_hover.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\chrome-ext-2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\share_icons2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoDev.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\RHP_icons.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\selection-actions.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover_2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\themes\dark\core_icons.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\[email protected] 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\SearchEmail2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\icons_retina.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\HighBeamCardLogo.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\tool-search-2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\files_icons2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\rhp_world_icon_hover_2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\email\empty.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Confirmation2x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\close_x.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\new_icons_retina.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\faf_field_grabber.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\media_poster.jpg.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\core_icons.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\core_icons.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\info.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\ccloud.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\bun.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\illustrations.png.m4locked 2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-01_cc831e5d3e12b06774d118246b361757_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Drops file in Program Files directory
PID:5020
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\Desktop\M4_4.txt
- Size 16B
- SHA256 af20cfe200e248638f081a0e03d1aec874738b230eda77812b8ea93127d2a0e8
- MD5 e83d455f804240989fdd7f8083f6d9ed
- SHA1 5e818a3d111d428b9702a2f4f5b2358665720cf9
- SHA512 358a6410d4b481a4911c8cf8568e0caf650648840c675114caaa388cf5751be0d9b76997c5b11e0a62cb1472323e53ad4844720925d25ed794f2d4e0bf62d033
- MD5 SHA1 SHA512