General
- Target 2026-07-16_f5bc84645c88f57a988cfb64f254c937_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.9MB
- Sample260716-c55e1sez31
- SHA256 5421de84ac52626640c8004a94732e2abadace7cb828f2a499901f59df259bb0
- MD5 f5bc84645c88f57a988cfb64f254c937
- SHA1 b646bce9d63740a5a1c0f8256a5456478dec8e50
- SHA512 3230d6d2be78449322b54da432d8616b5a6df7c055043e48ba53cf2275503f35e53ffc903dce6992aca65328bdffbc63d7d93f6d1792cb5757f98c7df9847e19
- SSDEEP 49152:GHDgAKoisznVrspN3jn3uULSOeutrI34gRKdyCFbipb5PN:G8wKvqOe0I4giit5V
- TLSH T1E5168D07BDA148EAC09AE23188B76156BB64BC0C1B3133D72E60BB782F767D05D79B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_f5bc84645c88f57a988cfb64f254c937_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_f5bc84645c88f57a988cfb64f254c937_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_f5bc84645c88f57a988cfb64f254c937_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.9MB
- SHA256 5421de84ac52626640c8004a94732e2abadace7cb828f2a499901f59df259bb0
- MD5 f5bc84645c88f57a988cfb64f254c937
- SHA1 b646bce9d63740a5a1c0f8256a5456478dec8e50
- SHA512 3230d6d2be78449322b54da432d8616b5a6df7c055043e48ba53cf2275503f35e53ffc903dce6992aca65328bdffbc63d7d93f6d1792cb5757f98c7df9847e19
- SSDEEP 49152:GHDgAKoisznVrspN3jn3uULSOeutrI34gRKdyCFbipb5PN:G8wKvqOe0I4giit5V
- TLSH T1E5168D07BDA148EAC09AE23188B76156BB64BC0C1B3133D72E60BB782F767D05D79B54
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger