General
- Target 2026-07-11_4295a5a4c05b037754be12db98ecb658_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.1MB
- Sample260711-xdpkpsht7m
- SHA256 e60c96ba52b0e25e31026fce4762fca9e0b3a599a5d11700d0e651446f6d8d3d
- MD5 4295a5a4c05b037754be12db98ecb658
- SHA1 8f786eb10ce321e557544b09372e0743c46eeffb
- SHA512 2a97f275424fe57fcc301f05149620ccc26df4286a1799f1d6e25a550fcd8da6ca44c1231b9b143db9380ef5648b11cf21dece5e1f203c73f4d0cea3e64a8f8e
- SSDEEP 49152:dx+IPtStwuIADqq38N1r7Kk4M2Q9C7fo:dxVOqq3+1DNdCro
- TLSH T12FE58C07BD901AFBD49AA33189B252967B75BC086F3223C72E50B7382E727D09D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_4295a5a4c05b037754be12db98ecb658_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_4295a5a4c05b037754be12db98ecb658_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_4295a5a4c05b037754be12db98ecb658_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.1MB
- SHA256 e60c96ba52b0e25e31026fce4762fca9e0b3a599a5d11700d0e651446f6d8d3d
- MD5 4295a5a4c05b037754be12db98ecb658
- SHA1 8f786eb10ce321e557544b09372e0743c46eeffb
- SHA512 2a97f275424fe57fcc301f05149620ccc26df4286a1799f1d6e25a550fcd8da6ca44c1231b9b143db9380ef5648b11cf21dece5e1f203c73f4d0cea3e64a8f8e
- SSDEEP 49152:dx+IPtStwuIADqq38N1r7Kk4M2Q9C7fo:dxVOqq3+1DNdCro
- TLSH T12FE58C07BD901AFBD49AA33189B252967B75BC086F3223C72E50B7382E727D09D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger