General
- Target 2026-07-22_a9bda1820b884e7ff3aa1063173ffd64_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- Sample260722-13g4pscg45
- SHA256 5feca9faa316196544e05669b19a4fbb6ad89e2c107595e9e03c42479de8e7aa
- MD5 a9bda1820b884e7ff3aa1063173ffd64
- SHA1 6886836df81cf5732196f356023492a9aa55797d
- SHA512 152dc1da21ebd62b9ffb5b07ed89df75e862af20cf98c7aa191ce369f72674935dd0be929e1c72c18150e3a74b6823f7d65c91d392c4cbcbcd46a432f6a90e7b
- SSDEEP 49152:Z1/GzuSX5oKFBrppabDF3yudh8QTi5/CfYp:ZgdBudh8QTi5/yG
- TLSH T17A067C17EC9148F6C0AAA23189B686567B35BC492B3237D72E60BB782FB37C04D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_a9bda1820b884e7ff3aa1063173ffd64_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_a9bda1820b884e7ff3aa1063173ffd64_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_a9bda1820b884e7ff3aa1063173ffd64_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- SHA256 5feca9faa316196544e05669b19a4fbb6ad89e2c107595e9e03c42479de8e7aa
- MD5 a9bda1820b884e7ff3aa1063173ffd64
- SHA1 6886836df81cf5732196f356023492a9aa55797d
- SHA512 152dc1da21ebd62b9ffb5b07ed89df75e862af20cf98c7aa191ce369f72674935dd0be929e1c72c18150e3a74b6823f7d65c91d392c4cbcbcd46a432f6a90e7b
- SSDEEP 49152:Z1/GzuSX5oKFBrppabDF3yudh8QTi5/CfYp:ZgdBudh8QTi5/yG
- TLSH T17A067C17EC9148F6C0AAA23189B686567B35BC492B3237D72E60BB782FB37C04D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger