General
- Target 2026-07-17_7ae1c9b66746280c000f9bbf64743b67_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.3MB
- Sample260717-csmpfahx3r
- SHA256 fed6abd01f22c838db42f27e86b01b5df103182ab12a95e384265dd6c9fae2dd
- MD5 7ae1c9b66746280c000f9bbf64743b67
- SHA1 6d221cf7d8d176b17d236bfd4416cc7f152a8065
- SHA512 089719c2af09f2b704b75f8d2fbf77420c6b40e5bdc47c02739ba09624da19040e58573da86502a2e123db3af200ab6d49fff84c9b088042f27e0a26ce81f48d
- SSDEEP 49152:DG/cqoR4Gf0VVP38r/Z8xbnoJVlGL11EnSnC1fZpJWPWx9t1dPtS4k4VX4oCgu:DtSRGl+snSnCljJW+5rkp4y
- TLSH T1B1267B03FEA504F9D1AAE63189764142BA74BC4D0B3133E72E50B6782F763D19DB9B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_7ae1c9b66746280c000f9bbf64743b67_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_7ae1c9b66746280c000f9bbf64743b67_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_7ae1c9b66746280c000f9bbf64743b67_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.3MB
- SHA256 fed6abd01f22c838db42f27e86b01b5df103182ab12a95e384265dd6c9fae2dd
- MD5 7ae1c9b66746280c000f9bbf64743b67
- SHA1 6d221cf7d8d176b17d236bfd4416cc7f152a8065
- SHA512 089719c2af09f2b704b75f8d2fbf77420c6b40e5bdc47c02739ba09624da19040e58573da86502a2e123db3af200ab6d49fff84c9b088042f27e0a26ce81f48d
- SSDEEP 49152:DG/cqoR4Gf0VVP38r/Z8xbnoJVlGL11EnSnC1fZpJWPWx9t1dPtS4k4VX4oCgu:DtSRGl+snSnCljJW+5rkp4y
- TLSH T1B1267B03FEA504F9D1AAE63189764142BA74BC4D0B3133E72E50B6782F763D19DB9B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Suspicious use of NtSetInformationThreadHideFromDebugger