General
- Target 2026-07-16_5754b2316ed3ba0f59e1db80090d9934_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.9MB
- Sample260716-ddntmafs5y
- SHA256 bcefa0960cb830a364ab20b3cb91b645ff396cfedba0da21a0d39d9cb520f93c
- MD5 5754b2316ed3ba0f59e1db80090d9934
- SHA1 28519e09dd84bec3997492014df5740322192224
- SHA512 df3dd5e6ffec9fd365dedcda77b2b1b8f91d9869c5b8905693f5d9e415b9ac8b1f0cc544dbcee227aef060984ae277bccd8d21ecd12e1b1074fbec10ff0f0f3d
- SSDEEP 49152:WEqEZIjsfnSL+F3EfQ51gdJL6u9+tduj/2xkGkH1q83rIYoOLppxk3:WMdhE/skGkH1Z3rIYoOLTxI
- TLSH T17F167C03FCA148EAC19AA63089BB61527774BC4C5B3223D72E507BB82F727D46D39B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_5754b2316ed3ba0f59e1db80090d9934_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_5754b2316ed3ba0f59e1db80090d9934_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_5754b2316ed3ba0f59e1db80090d9934_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.9MB
- SHA256 bcefa0960cb830a364ab20b3cb91b645ff396cfedba0da21a0d39d9cb520f93c
- MD5 5754b2316ed3ba0f59e1db80090d9934
- SHA1 28519e09dd84bec3997492014df5740322192224
- SHA512 df3dd5e6ffec9fd365dedcda77b2b1b8f91d9869c5b8905693f5d9e415b9ac8b1f0cc544dbcee227aef060984ae277bccd8d21ecd12e1b1074fbec10ff0f0f3d
- SSDEEP 49152:WEqEZIjsfnSL+F3EfQ51gdJL6u9+tduj/2xkGkH1q83rIYoOLppxk3:WMdhE/skGkH1Z3rIYoOLTxI
- TLSH T17F167C03FCA148EAC19AA63089BB61527774BC4C5B3223D72E507BB82F727D46D39B54
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger