General
- Target 2026-07-22_b91f8bc0a217829331d32734e6df0ad8_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- Sample260722-12grjs1ybx
- SHA256 c527981700c1c098a53066fc55b10523d0049c7cd409d1a46c1a6323adf15210
- MD5 b91f8bc0a217829331d32734e6df0ad8
- SHA1 dbcd78f70ec1e66280f5f59591bc11cd4c07d204
- SHA512 c08fca7233b3d29006ab078276b031e8bae7b8142453e9bda57cc57e96f9adda804cccb4d69ce19799541dc0bef652dc248536e6a28147610ec1774c00740177
- SSDEEP 49152:1o2FXs+2T24c5UI5lSfMgT/Jd03Xxa/aJxAoF4rV12nC3:1FRCksC0rPD3
- TLSH T1E6067D03ACD048F5C499A23289B39256B735BC491B7273E72E50BB783E727D09C7A764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_b91f8bc0a217829331d32734e6df0ad8_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_b91f8bc0a217829331d32734e6df0ad8_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_b91f8bc0a217829331d32734e6df0ad8_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- SHA256 c527981700c1c098a53066fc55b10523d0049c7cd409d1a46c1a6323adf15210
- MD5 b91f8bc0a217829331d32734e6df0ad8
- SHA1 dbcd78f70ec1e66280f5f59591bc11cd4c07d204
- SHA512 c08fca7233b3d29006ab078276b031e8bae7b8142453e9bda57cc57e96f9adda804cccb4d69ce19799541dc0bef652dc248536e6a28147610ec1774c00740177
- SSDEEP 49152:1o2FXs+2T24c5UI5lSfMgT/Jd03Xxa/aJxAoF4rV12nC3:1FRCksC0rPD3
- TLSH T1E6067D03ACD048F5C499A23289B39256B735BC491B7273E72E50BB783E727D09C7A764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger