82189e1cd916962a806b377b38fba3b02007e9a252dc80616c6379770dfca1e1

General

Target
2026-07-10_f3985ec0a8c596af08f342ebb42c41d3_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
Size 3.3MB
Sample260710-d8ffqsdz2z
SHA256 82189e1cd916962a806b377b38fba3b02007e9a252dc80616c6379770dfca1e1
MD5 f3985ec0a8c596af08f342ebb42c41d3
SHA1 67eeb47437e60d6a9c711a936103686dd6252467
SHA512 e4cb9336887d6e6430a4daf99340aed41b071cffd3e11141f5b79c3bd731e6547dfec8b37fec87c469078e0f8cbd1dfee93356b58302e3a1cb4fabeec0fedb4f
SSDEEP 49152:BBsI6pZ+a2q5D2aCKFM1ad791q6ee5ny+MHUVSkb5Kxp/:BBInRvFMMGmyucQKf/
TLSH
T1E4F57C47BCD119EAC0AAA37189A361967735BC082F3267D32E60B37C2E767C06D39745
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-10_f3985ec0a8c596af08f342ebb42c41d3_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- SHA256 82189e1cd916962a806b377b38fba3b02007e9a252dc80616c6379770dfca1e1
- MD5 f3985ec0a8c596af08f342ebb42c41d3
- SHA1 67eeb47437e60d6a9c711a936103686dd6252467
- SHA512 e4cb9336887d6e6430a4daf99340aed41b071cffd3e11141f5b79c3bd731e6547dfec8b37fec87c469078e0f8cbd1dfee93356b58302e3a1cb4fabeec0fedb4f
- SSDEEP 49152:BBsI6pZ+a2q5D2aCKFM1ad791q6ee5ny+MHUVSkb5Kxp/:BBInRvFMMGmyucQKf/
- TLSH
  T1E4F57C47BCD119EAC0AAA37189A361967735BC082F3267D32E60B37C2E767C06D39745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

credential_access discovery spyware stealer
- Suspicious use of NtCreateProcessExOtherParentProcess
- Detects Windows executables referencing non-Windows User-Agents
- Reads WinSCP keys stored on the system
  Tries to access WinSCP stored sessions.
  spyware stealer
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2