General
- Target 2026-07-11_518b00a06449379093dcbe3d7eb19ba2_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.1MB
- Sample260711-e88mysbx6j
- SHA256 e891a52a1e19701154b21727f229c8dda1588c5cc0a70fc6bcee0dacd65b0ff7
- MD5 518b00a06449379093dcbe3d7eb19ba2
- SHA1 92e9d58452d12b488643c81b86f9e827803cfed5
- SHA512 f4c43b9e51521faa21fecece2e9f257260a1a28bfbf7dc7e88e688961d000222717f7d7e82530962bf01a02b4172b778e58236062682c32b992de318399b7b18
- SSDEEP 49152:6wEXk6umgp4wXE1enYkwrPuguY6vjQk12VlcA/T72V:6wdpXEG4j0z1cqA/TyV
- TLSH T1B4E5AD07BD9009EBC0A9A33189B625A5BB31BC491F3263D72E9477782F327D09D35B64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_518b00a06449379093dcbe3d7eb19ba2_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_518b00a06449379093dcbe3d7eb19ba2_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_518b00a06449379093dcbe3d7eb19ba2_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.1MB
- SHA256 e891a52a1e19701154b21727f229c8dda1588c5cc0a70fc6bcee0dacd65b0ff7
- MD5 518b00a06449379093dcbe3d7eb19ba2
- SHA1 92e9d58452d12b488643c81b86f9e827803cfed5
- SHA512 f4c43b9e51521faa21fecece2e9f257260a1a28bfbf7dc7e88e688961d000222717f7d7e82530962bf01a02b4172b778e58236062682c32b992de318399b7b18
- SSDEEP 49152:6wEXk6umgp4wXE1enYkwrPuguY6vjQk12VlcA/T72V:6wdpXEG4j0z1cqA/TyV
- TLSH T1B4E5AD07BD9009EBC0A9A33189B625A5BB31BC491F3263D72E9477782F327D09D35B64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger