General
- Target 2026-07-22_792b8f55700de58b9ae9cd54a9b549c5_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- Sample260722-16vh7scg92
- SHA256 84308e7c0cfa27735208a6ea4b28381af3cfb89fc87f4f240596730593375d4c
- MD5 792b8f55700de58b9ae9cd54a9b549c5
- SHA1 db82ef1516cb2285fde7a3e7eda4f9c190e52d71
- SHA512 9dbc4ed87617593e9536a122a9051cba12e5db53a1f0e2be1e4b6e440adaafd9d1a498a9560cfc3345244e40385bde4d30f1488957f71a1498db16dceadc63ce
- SSDEEP 49152:UAbpyXHeGLJ4KqHVDPtQLk4WIcT2NZslSJ4ezKAJCCC90d:U/wAWIo2NZslS+ezKsnH
- TLSH T1C1067C07EC9188E6D0A9A331C9B79551BB61BC482B3673E72E60BB382EB37C05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_792b8f55700de58b9ae9cd54a9b549c5_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_792b8f55700de58b9ae9cd54a9b549c5_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_792b8f55700de58b9ae9cd54a9b549c5_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- SHA256 84308e7c0cfa27735208a6ea4b28381af3cfb89fc87f4f240596730593375d4c
- MD5 792b8f55700de58b9ae9cd54a9b549c5
- SHA1 db82ef1516cb2285fde7a3e7eda4f9c190e52d71
- SHA512 9dbc4ed87617593e9536a122a9051cba12e5db53a1f0e2be1e4b6e440adaafd9d1a498a9560cfc3345244e40385bde4d30f1488957f71a1498db16dceadc63ce
- SSDEEP 49152:UAbpyXHeGLJ4KqHVDPtQLk4WIcT2NZslSJ4ezKAJCCC90d:U/wAWIo2NZslS+ezKsnH
- TLSH T1C1067C07EC9188E6D0A9A331C9B79551BB61BC482B3673E72E60BB382EB37C05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Suspicious use of NtSetInformationThreadHideFromDebugger