General
- Target 2026-07-19_080db4a8c4d6fcc9d1e973695238b812_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- Sample260719-cfyaeacv2y
- SHA256 ee1c041f1b6cca240ee87ace0b02a9d4f2e5ad93cddd1f25eb9d983f2b827272
- MD5 080db4a8c4d6fcc9d1e973695238b812
- SHA1 1779102c90d09cf359f3d2e2927e0893e7839085
- SHA512 0ff0aed8f6a15600f7f93441c1f90f72a2f9d26b14251d52140c4c04ef9b7e57cb2551c34b34be1207fe5506daed93d3bab4e7e0cc4874d9c0a0fb8183d404b1
- SSDEEP 49152:OcXn9PApy2q9iItQx6aWhprQAJTnaf7vn6CbqWjmwksML+ls2W1d:OgTVQAQbDq+eld
- TLSH T168F57B17ED9148F6C0A9A23189B25295BB75BC0D1B3237EB2E807A783F727D06D39714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_080db4a8c4d6fcc9d1e973695238b812_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_080db4a8c4d6fcc9d1e973695238b812_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_080db4a8c4d6fcc9d1e973695238b812_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- SHA256 ee1c041f1b6cca240ee87ace0b02a9d4f2e5ad93cddd1f25eb9d983f2b827272
- MD5 080db4a8c4d6fcc9d1e973695238b812
- SHA1 1779102c90d09cf359f3d2e2927e0893e7839085
- SHA512 0ff0aed8f6a15600f7f93441c1f90f72a2f9d26b14251d52140c4c04ef9b7e57cb2551c34b34be1207fe5506daed93d3bab4e7e0cc4874d9c0a0fb8183d404b1
- SSDEEP 49152:OcXn9PApy2q9iItQx6aWhprQAJTnaf7vn6CbqWjmwksML+ls2W1d:OgTVQAQbDq+eld
- TLSH T168F57B17ED9148F6C0A9A23189B25295BB75BC0D1B3237EB2E807A783F727D06D39714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger