General
- Target 2026-07-20_0a430c5c623395fb820141316c641bbe_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.2MB
- Sample260720-n8xp5abw9w
- SHA256 5fc32de923ec55a30d3b84b6f8aa350e058c5939fcf3d93d3fb97646c807e891
- MD5 0a430c5c623395fb820141316c641bbe
- SHA1 a878bcc32c6b94c7928fb5dc5ead5bf448a4d429
- SHA512 7605dc3c20d39289b95ae2a8de8e6639f1e910b92f3b0ae50e4cb56d5a516279a67ce064aa1b12b3cc3f0a1887efac93096a1487bf059e3bb61f417b83b250bf
- SSDEEP 49152:hCBqmJ0MttG1sGvF8KDQOiX9ljVlQ2BoIuUUW7EHKLehPUpa9BhWXb:hBSc9QhlpoIuUUW7vLucRL
- TLSH T179167B07FD9544E9C1A9E73189A34242BB74BC4D4B3633E72E90AA782F723C16D75B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0a430c5c623395fb820141316c641bbe_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0a430c5c623395fb820141316c641bbe_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0a430c5c623395fb820141316c641bbe_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.2MB
- SHA256 5fc32de923ec55a30d3b84b6f8aa350e058c5939fcf3d93d3fb97646c807e891
- MD5 0a430c5c623395fb820141316c641bbe
- SHA1 a878bcc32c6b94c7928fb5dc5ead5bf448a4d429
- SHA512 7605dc3c20d39289b95ae2a8de8e6639f1e910b92f3b0ae50e4cb56d5a516279a67ce064aa1b12b3cc3f0a1887efac93096a1487bf059e3bb61f417b83b250bf
- SSDEEP 49152:hCBqmJ0MttG1sGvF8KDQOiX9ljVlQ2BoIuUUW7EHKLehPUpa9BhWXb:hBSc9QhlpoIuUUW7vLucRL
- TLSH T179167B07FD9544E9C1A9E73189A34242BB74BC4D4B3633E72E90AA782F723C16D75B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger