General
- Target 2026-06-30_07c8f75fef55b24196b585615a66466c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.3MB
- Sample260701-hb77psat7v
- SHA256 05f537eda68435f15f053928f4d1e14ad8426e73b9e55150013189600be0bd6d
- MD5 07c8f75fef55b24196b585615a66466c
- SHA1 eccadbf2d1274cbaa96deecd95a2e930b9e271ef
- SHA512 4da8c26e740a4e433a85bf9e10cf00a391be7d5a48c405c3f3bfb02fc6981eab4c4f6a56a9c216dd172391374b862b0236d6d2cb4bcd8bfbbd2e85509308ae65
- SSDEEP 49152:7rHMNDhqm6RRTpExvlKtDDhb/grwZOVele9ziTBIBCPr:7rAlvlgjLeA
- TLSH T100F57C0AFCA549F8C49EA231C9B29592B739BC451F3127D76AA0B3342F727D09C36758
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_07c8f75fef55b24196b585615a66466c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
2.0
C2
-
https://telegram.me/d77xtr
-
https://steamcommunity
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/147.0.0
Targets
-
- Target 2026-06-30_07c8f75fef55b24196b585615a66466c_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.3MB
- SHA256 05f537eda68435f15f053928f4d1e14ad8426e73b9e55150013189600be0bd6d
- MD5 07c8f75fef55b24196b585615a66466c
- SHA1 eccadbf2d1274cbaa96deecd95a2e930b9e271ef
- SHA512 4da8c26e740a4e433a85bf9e10cf00a391be7d5a48c405c3f3bfb02fc6981eab4c4f6a56a9c216dd172391374b862b0236d6d2cb4bcd8bfbbd2e85509308ae65
- SSDEEP 49152:7rHMNDhqm6RRTpExvlKtDDhb/grwZOVele9ziTBIBCPr:7rAlvlgjLeA
- TLSH T100F57C0AFCA549F8C49EA231C9B29592B739BC451F3127D76AA0B3342F727D09C36758
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of NtSetInformationThreadHideFromDebugger