General
- Target 2026-07-22_f66976d6e460525844d80857a074239b_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- Sample260722-1xe26awale
- SHA256 d9a856068a62c34966a532a0bf8d905aa91023c47c4c96c552921ab4ce81139b
- MD5 f66976d6e460525844d80857a074239b
- SHA1 30c14db33fc1fd52a497e1f9ea320ab726e45e20
- SHA512 cdd17f97b2d0b715d64cb7810dcc88defebc4d572da5ec7663d34ab9c377c63cc6f0fc453b93d1d2fc94aab291bf4bab1fd0867ee9dcaf6022a43e6d821334f9
- SSDEEP 49152:K4MuBZxDoeT5YcD6qCpM2ehUOjajK27gNvcb33LACd39B:KgnBkccDgNtgn
- TLSH T155069D07ECE248FAD099A33189B792557B75BC091B3233EB2E51AB782E72BC05D34754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_f66976d6e460525844d80857a074239b_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_f66976d6e460525844d80857a074239b_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_f66976d6e460525844d80857a074239b_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- SHA256 d9a856068a62c34966a532a0bf8d905aa91023c47c4c96c552921ab4ce81139b
- MD5 f66976d6e460525844d80857a074239b
- SHA1 30c14db33fc1fd52a497e1f9ea320ab726e45e20
- SHA512 cdd17f97b2d0b715d64cb7810dcc88defebc4d572da5ec7663d34ab9c377c63cc6f0fc453b93d1d2fc94aab291bf4bab1fd0867ee9dcaf6022a43e6d821334f9
- SSDEEP 49152:K4MuBZxDoeT5YcD6qCpM2ehUOjajK27gNvcb33LACd39B:KgnBkccDgNtgn
- TLSH T155069D07ECE248FAD099A33189B792557B75BC091B3233EB2E51AB782E72BC05D34754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger