General
- Target 2026-07-20_ec49da50edf60e958291eb825022489e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.9MB
- Sample260720-xd58fsb14k
- SHA256 e8c12184cff148becc41b2f8b6227b8f5a909e2d4c09491c4935a5786b9250e1
- MD5 ec49da50edf60e958291eb825022489e
- SHA1 38f54ff3524d604c32be1eb904ac325ec9fa1403
- SHA512 879bb558c703bff8edcb71d546e6238668c0d9608a78335be1be4f40295103686e4f1f58e819d8449134d162c7741450ee3249c35d7a43df903e6573f3ab3b84
- SSDEEP 49152:OWCjjFk0SCrvkNcv+mDwy/yBceefCoiK8EeLUgYKLaL9QpsA/J:OxXIBefocKLaLmeAR
- TLSH T11D168C43FDA248F6C09AE23189B651527B78BC0D5B3223D72E507BB82EB67D05D39B14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_ec49da50edf60e958291eb825022489e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_ec49da50edf60e958291eb825022489e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_ec49da50edf60e958291eb825022489e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.9MB
- SHA256 e8c12184cff148becc41b2f8b6227b8f5a909e2d4c09491c4935a5786b9250e1
- MD5 ec49da50edf60e958291eb825022489e
- SHA1 38f54ff3524d604c32be1eb904ac325ec9fa1403
- SHA512 879bb558c703bff8edcb71d546e6238668c0d9608a78335be1be4f40295103686e4f1f58e819d8449134d162c7741450ee3249c35d7a43df903e6573f3ab3b84
- SSDEEP 49152:OWCjjFk0SCrvkNcv+mDwy/yBceefCoiK8EeLUgYKLaL9QpsA/J:OxXIBefocKLaLmeAR
- TLSH T11D168C43FDA248F6C09AE23189B651527B78BC0D5B3223D72E507BB82EB67D05D39B14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger