General
- Target 2026-06-28_32233842a4faa2e675be76b2ad5847c8_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.5MB
- Sample260628-3hffgshs8p
- SHA256 270a9ebd510b75d3ad8828c4ed967d68717423286fdd5aab40737080d9702360
- MD5 32233842a4faa2e675be76b2ad5847c8
- SHA1 7c0e260a9e51e8295fae6c9597ec8d3832687272
- SHA512 930410a040ee29d0faac4acc7761f8badc371f26423f13457b95ed50eff0dec3c32505e20f77861a0d9bfd8456d8f35e98cc1b437fac76abb6bb511521ad5ad6
- SSDEEP 49152:IGLk6VZnC+FV7D72FGd4Tcs5OhUjpq8t:IKhVDjdg5y
- TLSH T18A068E46FCE668AAC059533189764282B77AFC0C1F3363C72A9273382E776D4AD35B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_32233842a4faa2e675be76b2ad5847c8_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_32233842a4faa2e675be76b2ad5847c8_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_32233842a4faa2e675be76b2ad5847c8_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.5MB
- SHA256 270a9ebd510b75d3ad8828c4ed967d68717423286fdd5aab40737080d9702360
- MD5 32233842a4faa2e675be76b2ad5847c8
- SHA1 7c0e260a9e51e8295fae6c9597ec8d3832687272
- SHA512 930410a040ee29d0faac4acc7761f8badc371f26423f13457b95ed50eff0dec3c32505e20f77861a0d9bfd8456d8f35e98cc1b437fac76abb6bb511521ad5ad6
- SSDEEP 49152:IGLk6VZnC+FV7D72FGd4Tcs5OhUjpq8t:IKhVDjdg5y
- TLSH T18A068E46FCE668AAC059533189764282B77AFC0C1F3363C72A9273382E776D4AD35B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.