General
- Target 2026-07-16_5dc42d42d96b1c2a836e143f88f932db_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- Sample260716-rdw2wse12m
- SHA256 fd855f00c554b06313627a51db480e77bd2f4ca6350bce2cb0833156ae9b23ce
- MD5 5dc42d42d96b1c2a836e143f88f932db
- SHA1 ca45815e17289e970e60fda332e0c7909263c2ec
- SHA512 e6d77d627ca20b8c93e2016c882423251ddc20639677a657b3ea2b2b24ae91fbe9030264406afed0987b89eb88f0e68756d044caabaf5e2473212b3334a130bd
- SSDEEP 49152:sWmgXehSq0a+Jq/BYYF8PcVZeqiDxTNS4G+JqEpY:siABPvX7ilNq+Ba
- TLSH T165068C07BC9549F6C099A33289B79652BB35BC091B3633DB2E607B382E767D05D39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_5dc42d42d96b1c2a836e143f88f932db_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_5dc42d42d96b1c2a836e143f88f932db_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_5dc42d42d96b1c2a836e143f88f932db_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- SHA256 fd855f00c554b06313627a51db480e77bd2f4ca6350bce2cb0833156ae9b23ce
- MD5 5dc42d42d96b1c2a836e143f88f932db
- SHA1 ca45815e17289e970e60fda332e0c7909263c2ec
- SHA512 e6d77d627ca20b8c93e2016c882423251ddc20639677a657b3ea2b2b24ae91fbe9030264406afed0987b89eb88f0e68756d044caabaf5e2473212b3334a130bd
- SSDEEP 49152:sWmgXehSq0a+Jq/BYYF8PcVZeqiDxTNS4G+JqEpY:siABPvX7ilNq+Ba
- TLSH T165068C07BC9549F6C099A33289B79652BB35BC091B3633DB2E607B382E767D05D39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger