General
- Target 2026-07-18_98ee7bb8267a0809ecaeea571207cfa5_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.7MB
- Sample260718-3rm7paft9p
- SHA256 41298ec5153855a9e9f1ff921425ccf0702a3059741cba908b0727c1518a1da3
- MD5 98ee7bb8267a0809ecaeea571207cfa5
- SHA1 f91dfd4278a0297f8a294cbf0f499222d90d178e
- SHA512 39e8c4fce6011fff8e177e5d7314f9dd915bc351d9ebb86a7e97a425acca2cca443db3000665e890896584e4c8c1013a949ebf5055a454603bc74c8511b71b96
- SSDEEP 49152:YrjRMCGN0FdBT8LBHtQR1G+4rSSL8pn62MYxlfNdTPcZv9Op1jQVm:Yh4NXd2l7dQN9Or2m
- TLSH T162067B07EC9448FAC49AA33289A796527B75BC492B3233DB3E516B382F723D05C36754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_98ee7bb8267a0809ecaeea571207cfa5_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_98ee7bb8267a0809ecaeea571207cfa5_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_98ee7bb8267a0809ecaeea571207cfa5_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.7MB
- SHA256 41298ec5153855a9e9f1ff921425ccf0702a3059741cba908b0727c1518a1da3
- MD5 98ee7bb8267a0809ecaeea571207cfa5
- SHA1 f91dfd4278a0297f8a294cbf0f499222d90d178e
- SHA512 39e8c4fce6011fff8e177e5d7314f9dd915bc351d9ebb86a7e97a425acca2cca443db3000665e890896584e4c8c1013a949ebf5055a454603bc74c8511b71b96
- SSDEEP 49152:YrjRMCGN0FdBT8LBHtQR1G+4rSSL8pn62MYxlfNdTPcZv9Op1jQVm:Yh4NXd2l7dQN9Or2m
- TLSH T162067B07EC9448FAC49AA33289A796527B75BC492B3233DB3E516B382F723D05C36754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger