General
- Target 2026-07-20_24d3436de49f0eeba7e0d463a4be1001_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.7MB
- Sample260720-1b3lbse16q
- SHA256 c382dedc087b24d9b628720e892a82bc24906e2644ce38b4ad1b58b259ff954f
- MD5 24d3436de49f0eeba7e0d463a4be1001
- SHA1 6376da9c8cceed2e0b482dd159d1d7082883e41e
- SHA512 78259376911c4e40b9e1c91c1925ec78357cef2589a6b441569b1d56ca8a5451ca995c2b15568b22c3b509128b65269614465a6855631bc057b68e0103ba61da
- SSDEEP 49152:Mfus4ByhA1jau5/kacVFMKDJvQ81HR8JwqT9rckOKqB62kq08uc/g:MPktk1l1x+xHOKqrg6g
- TLSH T1F9068B07FCD108F6C0A9A232C9A752467B75BC494B3223D72EA0BB782E367E15D75B14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_24d3436de49f0eeba7e0d463a4be1001_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_24d3436de49f0eeba7e0d463a4be1001_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_24d3436de49f0eeba7e0d463a4be1001_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.7MB
- SHA256 c382dedc087b24d9b628720e892a82bc24906e2644ce38b4ad1b58b259ff954f
- MD5 24d3436de49f0eeba7e0d463a4be1001
- SHA1 6376da9c8cceed2e0b482dd159d1d7082883e41e
- SHA512 78259376911c4e40b9e1c91c1925ec78357cef2589a6b441569b1d56ca8a5451ca995c2b15568b22c3b509128b65269614465a6855631bc057b68e0103ba61da
- SSDEEP 49152:Mfus4ByhA1jau5/kacVFMKDJvQ81HR8JwqT9rckOKqB62kq08uc/g:MPktk1l1x+xHOKqrg6g
- TLSH T1F9068B07FCD108F6C0A9A232C9A752467B75BC494B3223D72EA0BB782E367E15D75B14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger