General
- Target 2026-07-22_d21f2c6df2e4b2db3ca8bf0721555ddf_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- Sample260722-2718tasvas
- SHA256 f040b4872003392df20a617aca270b93fb69cb34b5070b85ad3738d20c6779c1
- MD5 d21f2c6df2e4b2db3ca8bf0721555ddf
- SHA1 1ee1aa2f4329b7afdb929eded51af6da78e6f09e
- SHA512 14074cd18be8e19f649ebeed805b4c1ba33c64ba128e2bc78fd4667b4cefb391ad67add51a5f21535c182b7136b72d55e90c15d101bbff30ac1d14f8626df71c
- SSDEEP 49152:6gJPERYiF9rJP78tmLD5ou9fwgp/U6tNOMCg2dJEgdbTN1OsJ:6ei7pll1/JNOxg2dDCm
- TLSH T1CC068C07EC9188E6C1A9A332C8B78556B735BC091B3227D72E907B343EB27D06E35B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_d21f2c6df2e4b2db3ca8bf0721555ddf_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_d21f2c6df2e4b2db3ca8bf0721555ddf_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_d21f2c6df2e4b2db3ca8bf0721555ddf_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- SHA256 f040b4872003392df20a617aca270b93fb69cb34b5070b85ad3738d20c6779c1
- MD5 d21f2c6df2e4b2db3ca8bf0721555ddf
- SHA1 1ee1aa2f4329b7afdb929eded51af6da78e6f09e
- SHA512 14074cd18be8e19f649ebeed805b4c1ba33c64ba128e2bc78fd4667b4cefb391ad67add51a5f21535c182b7136b72d55e90c15d101bbff30ac1d14f8626df71c
- SSDEEP 49152:6gJPERYiF9rJP78tmLD5ou9fwgp/U6tNOMCg2dJEgdbTN1OsJ:6ei7pll1/JNOxg2dDCm
- TLSH T1CC068C07EC9188E6C1A9A332C8B78556B735BC091B3227D72E907B343EB27D06E35B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger