General
- Target 2026-07-20_2317c93fc0f84189bd211eff7e70328e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- Sample260720-17xd7afy2m
- SHA256 9ad19c2106608904032fd49348eb4d6edcc5d712ca2b61a7cb3d0ad5c48aed83
- MD5 2317c93fc0f84189bd211eff7e70328e
- SHA1 2a7b34b3ac7e3f015ac3c67e5c7cd1a9637775a1
- SHA512 266ffaf8f20603a7752418e7632a5f76afe646d6ab0522bc310bd17bf53ec80ee8970c4ec5b8045209f74936821e3aa2235dec301c62c049870039573923c443
- SSDEEP 49152:ALFhXPTOR2Tr51d9QJT940RyBSaemNKM44xouDN9kCQs7getfQZidrN6OUY:An9dy4iU0mNKM4woqzkCQKgU4Er9f
- TLSH T1B0068C07ACD108E6C099A332C9B78246BB797C085B3623D72E90BB782F727D19D36755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_2317c93fc0f84189bd211eff7e70328e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_2317c93fc0f84189bd211eff7e70328e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_2317c93fc0f84189bd211eff7e70328e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- SHA256 9ad19c2106608904032fd49348eb4d6edcc5d712ca2b61a7cb3d0ad5c48aed83
- MD5 2317c93fc0f84189bd211eff7e70328e
- SHA1 2a7b34b3ac7e3f015ac3c67e5c7cd1a9637775a1
- SHA512 266ffaf8f20603a7752418e7632a5f76afe646d6ab0522bc310bd17bf53ec80ee8970c4ec5b8045209f74936821e3aa2235dec301c62c049870039573923c443
- SSDEEP 49152:ALFhXPTOR2Tr51d9QJT940RyBSaemNKM44xouDN9kCQs7getfQZidrN6OUY:An9dy4iU0mNKM4woqzkCQKgU4Er9f
- TLSH T1B0068C07ACD108E6C099A332C9B78246BB797C085B3623D72E90BB782F727D19D36755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger