General
- Target 2026-07-22_331467b2246e5305bdc8100538cbc096_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- Sample260722-2bm2bach78
- SHA256 7109a8ced6065b9f6ae190e05fdf519658d808a3b22874f8ecd3a47ef6ce58b5
- MD5 331467b2246e5305bdc8100538cbc096
- SHA1 eebff847de7f3fbd539f336a3c781e7a1ff77743
- SHA512 d71e3bbae70a4ab82b3254135906b37a3ecb3bb87cee98e22894f92401e4383d168848bdef579ca26201a3b2ac66d165cfd3f7d687547a1a19b34c13207a4fc3
- SSDEEP 49152:5r71htoIBszycQFQRuLBzIwpdeoMk/U9CGFw:51l5BzIwpdeoMl9DK
- TLSH T163068B03FCA148E9D0AAA33189B782567774BC091B3633EB2E51BB782EB27D05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_331467b2246e5305bdc8100538cbc096_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_331467b2246e5305bdc8100538cbc096_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_331467b2246e5305bdc8100538cbc096_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- SHA256 7109a8ced6065b9f6ae190e05fdf519658d808a3b22874f8ecd3a47ef6ce58b5
- MD5 331467b2246e5305bdc8100538cbc096
- SHA1 eebff847de7f3fbd539f336a3c781e7a1ff77743
- SHA512 d71e3bbae70a4ab82b3254135906b37a3ecb3bb87cee98e22894f92401e4383d168848bdef579ca26201a3b2ac66d165cfd3f7d687547a1a19b34c13207a4fc3
- SSDEEP 49152:5r71htoIBszycQFQRuLBzIwpdeoMk/U9CGFw:51l5BzIwpdeoMl9DK
- TLSH T163068B03FCA148E9D0AAA33189B782567774BC091B3633EB2E51BB782EB27D05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger