595aa80df82275307cceb931bfdc5a3ab6722e0b074ce71b9d94333aeb045acf

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 10:57

Target
2026-07-31_d4fd672c14fbd808fbe73116aed1d402_coinminer_frostygoop_hive_knight_luca-stealer_poet-rat_salatstealer_sliver.exe
Size 6.4MB
Sample260731-m2m2ns1dqa
SHA256 595aa80df82275307cceb931bfdc5a3ab6722e0b074ce71b9d94333aeb045acf
MD5 d4fd672c14fbd808fbe73116aed1d402
SHA1 ecdff90afcd313f8f152b658b5eae150ce9d121d
SHA512 9b7cb6615cc970e1ec62df98a5db3579c98f3cfd71dda492d93552529bcfaf86a1ea01ff43356326ecd3c847691b2465eba49f5bb252c70b5ca80d2a36299475
SSDEEP 49152:1rMaOePvYCGdNTQTfDDwFsYolnYc0HyeYRzxq8fvVhoItAT6lfAs38rUj53kdL/Y:1rfPQyc2y8cTudjLC3b
TLSH
T1A5664943F4E21C94C4FDD270953A8226A9617C4D5B3A33EB57D0B6742F323E1AA76B90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 928 wrote to memory of 5136	928	2026-07-31_d4fd672c14fbd808fbe73116aed1d402_coinminer_frostygoop_hive_knight_luca-stealer_poet-rat_salatstealer_sliver.exe	88

C:\Users\Admin\AppData\Local\Temp\2026-07-31_d4fd672c14fbd808fbe73116aed1d402_coinminer_frostygoop_hive_knight_luca-stealer_poet-rat_salatstealer_sliver.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-31_d4fd672c14fbd808fbe73116aed1d402_coinminer_frostygoop_hive_knight_luca-stealer_poet-rat_salatstealer_sliver.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:928
- C:\Users\Admin\AppData\Local\Temp\2026-07-31_d4fd672c14fbd808fbe73116aed1d402_coinminer_frostygoop_hive_knight_luca-stealer_poet-rat_salatstealer_sliver.exe
  C:\Users\Admin\AppData\Local\Temp\2026-07-31_d4fd672c14fbd808fbe73116aed1d402_coinminer_frostygoop_hive_knight_luca-stealer_poet-rat_salatstealer_sliver.exe 0
  2⤵
  PID:5136