General
- Target 2026-07-20_676dcd96c8b4304fad5fc9ab6e7c9f25_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.7MB
- Sample260720-zc4pcaes8q
- SHA256 d7a7395d82ec72dafa30bb936d7f831153da815d249768d14984311c2c3cca98
- MD5 676dcd96c8b4304fad5fc9ab6e7c9f25
- SHA1 654ed9545b59a507330cb7bfab43e51b8e1f7ab4
- SHA512 af534ab813fefc63dbd82275d6c79cdd5866574e2b682ca247e1680ab18d4877bacab1b0ff69a46179f35918032e40ac910e5b56f8fc4f807bb9660e82d760be
- SSDEEP 49152:VGn4SjJPizgMl4KoJgD5yYoXE091l/MLg396z+aHjd7pJ6UG+ubKSSzfCkq4kVc:VxgOosFhc1l/kg396zhXJ6UGkSSus
- TLSH T188067C07BCD148F6C0A9A231C9A79656BB35BC091F3227D72E60BA783E727D05E39714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_676dcd96c8b4304fad5fc9ab6e7c9f25_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_676dcd96c8b4304fad5fc9ab6e7c9f25_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_676dcd96c8b4304fad5fc9ab6e7c9f25_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.7MB
- SHA256 d7a7395d82ec72dafa30bb936d7f831153da815d249768d14984311c2c3cca98
- MD5 676dcd96c8b4304fad5fc9ab6e7c9f25
- SHA1 654ed9545b59a507330cb7bfab43e51b8e1f7ab4
- SHA512 af534ab813fefc63dbd82275d6c79cdd5866574e2b682ca247e1680ab18d4877bacab1b0ff69a46179f35918032e40ac910e5b56f8fc4f807bb9660e82d760be
- SSDEEP 49152:VGn4SjJPizgMl4KoJgD5yYoXE091l/MLg396z+aHjd7pJ6UG+ubKSSzfCkq4kVc:VxgOosFhc1l/kg396zhXJ6UGkSSus
- TLSH T188067C07BCD148F6C0A9A231C9A79656BB35BC091F3227D72E60BA783E727D05E39714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Suspicious use of NtSetInformationThreadHideFromDebugger