General
- Target 2026-07-20_b1b3839061ba9caeb9ed0af4fef31135_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- Sample260720-nfdrjsav51
- SHA256 4f843f202db440c94aa0246a46816dc110f272c5e203b3738713db65c9933b45
- MD5 b1b3839061ba9caeb9ed0af4fef31135
- SHA1 5deedc5a485f221855d5d6994893b4e8dd7f4b2f
- SHA512 115db72efaadb2b9137d8ae83f9a6c68690d796e183d0c35079f99d78246eb740fc3e0134fb9ed4d018d0890fa48c8ebbc81f33b5239fa7d36a1a8efc320673b
- SSDEEP 49152:1bPd33jw7fEMLb6k+9sALqDMhoJJhFvdU4021a2fBixkFmlXWMyXN2xqw:1dccktaeixkFI9yXC1
- TLSH T159068C07ECD249E6C49AA332C9B282467738BC491B3227DB2E91BB382F767D05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b1b3839061ba9caeb9ed0af4fef31135_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b1b3839061ba9caeb9ed0af4fef31135_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b1b3839061ba9caeb9ed0af4fef31135_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- SHA256 4f843f202db440c94aa0246a46816dc110f272c5e203b3738713db65c9933b45
- MD5 b1b3839061ba9caeb9ed0af4fef31135
- SHA1 5deedc5a485f221855d5d6994893b4e8dd7f4b2f
- SHA512 115db72efaadb2b9137d8ae83f9a6c68690d796e183d0c35079f99d78246eb740fc3e0134fb9ed4d018d0890fa48c8ebbc81f33b5239fa7d36a1a8efc320673b
- SSDEEP 49152:1bPd33jw7fEMLb6k+9sALqDMhoJJhFvdU4021a2fBixkFmlXWMyXN2xqw:1dccktaeixkFI9yXC1
- TLSH T159068C07ECD249E6C49AA332C9B282467738BC491B3227DB2E91BB382F767D05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger