General
- Target 2026-07-23_0b6ea1de707801724b70148e697f8b92_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.3MB
- Sample260723-ncwsyscc74
- SHA256 169b0a80bfbe3f6fa02b7bfefbf6066b313e012a36a728e584e6fc82113809ac
- MD5 0b6ea1de707801724b70148e697f8b92
- SHA1 b819c1d4e7ab2c0eba6bbfbc4a3d566c16789025
- SHA512 b6f88189d58380c334c65e4fb30703a3b845e09896c3213117513d5588f7dc4539e355326bd64b79d6a6780303d4272f8ca68b616291e55ed00e9ab48a4afb71
- SSDEEP 49152:maqiNBJ2j+6gvBEw4TXReIF/xItRtIPiKFWLL6WRm7:maZsC4T0IF/xItRESLL6i2
- TLSH T18DF58C03BCD04AE6C4AEA23184B311967774BC4D1B3627DB3A50B6783E72BD06C76B59
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_0b6ea1de707801724b70148e697f8b92_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_0b6ea1de707801724b70148e697f8b92_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.3MB
- SHA256 169b0a80bfbe3f6fa02b7bfefbf6066b313e012a36a728e584e6fc82113809ac
- MD5 0b6ea1de707801724b70148e697f8b92
- SHA1 b819c1d4e7ab2c0eba6bbfbc4a3d566c16789025
- SHA512 b6f88189d58380c334c65e4fb30703a3b845e09896c3213117513d5588f7dc4539e355326bd64b79d6a6780303d4272f8ca68b616291e55ed00e9ab48a4afb71
- SSDEEP 49152:maqiNBJ2j+6gvBEw4TXReIF/xItRtIPiKFWLL6WRm7:maZsC4T0IF/xItRESLL6i2
- TLSH T18DF58C03BCD04AE6C4AEA23184B311967774BC4D1B3627DB3A50B6783E72BD06C76B59
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger