General
- Target 2026-07-22_01f02ea6b632c09bd0cda1a67cabb76a_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- Sample260722-2ey8ra11cs
- SHA256 21e7f1617cb649ba10ba31aeaa18c5b116c5cc3ab2583aad6d12e9e2c310261c
- MD5 01f02ea6b632c09bd0cda1a67cabb76a
- SHA1 907e5c79e73efcb0f4e4d94d1e2f57b08c69eafd
- SHA512 a3d31197ea2827b1acf60e507de88aae4b90446448fa7dc9e958f7054ce0cd0e0791876ca6444e08870fd42e06c1bd5d1874f57a25a39dd7d8719c40ff8e7a08
- SSDEEP 49152:TvdLWMIVDnVwG6QcnW+jF4McME9F5cokLhXe8CABR6:T52cPwlsO8vQ
- TLSH T1A4068D07EC9188F6C059A33289B65256BB75BC091B3237D72F51BB782E727C05D3AB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_01f02ea6b632c09bd0cda1a67cabb76a_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_01f02ea6b632c09bd0cda1a67cabb76a_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_01f02ea6b632c09bd0cda1a67cabb76a_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- SHA256 21e7f1617cb649ba10ba31aeaa18c5b116c5cc3ab2583aad6d12e9e2c310261c
- MD5 01f02ea6b632c09bd0cda1a67cabb76a
- SHA1 907e5c79e73efcb0f4e4d94d1e2f57b08c69eafd
- SHA512 a3d31197ea2827b1acf60e507de88aae4b90446448fa7dc9e958f7054ce0cd0e0791876ca6444e08870fd42e06c1bd5d1874f57a25a39dd7d8719c40ff8e7a08
- SSDEEP 49152:TvdLWMIVDnVwG6QcnW+jF4McME9F5cokLhXe8CABR6:T52cPwlsO8vQ
- TLSH T1A4068D07EC9188F6C059A33289B65256BB75BC091B3237D72F51BB782E727C05D3AB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger