General
- Target 2026-08-03_49d14b1c543b9691ced8b69849399079_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.4MB
- Sample260803-c8ad2sbb86
- SHA256 5804c1cf40ff8dbc75c4df3b699c79977980a08453ec140243b121131947de77
- MD5 49d14b1c543b9691ced8b69849399079
- SHA1 64e6b16942e7af3c9c4e5134502e1426dba6c60a
- SHA512 e2a3df8d21ba053a25698c77d6fb8ff9048f49bbc0fef3d4bc3b086d3b55564079760a26055126a5ad739f088f38635d2b6b05e1f8dcc2f93972a8fe737ba465
- SSDEEP 49152:4fDXYppEEn6GZ1S15U1cPVSTkyxI8rNxZXqTPcx:47zGi5gcKH
- TLSH T1C5C55B07FCA109E6C4AEA331896692567B71BC481F3223D32E50B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-03_49d14b1c543b9691ced8b69849399079_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-03_49d14b1c543b9691ced8b69849399079_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-08-03_49d14b1c543b9691ced8b69849399079_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.4MB
- SHA256 5804c1cf40ff8dbc75c4df3b699c79977980a08453ec140243b121131947de77
- MD5 49d14b1c543b9691ced8b69849399079
- SHA1 64e6b16942e7af3c9c4e5134502e1426dba6c60a
- SHA512 e2a3df8d21ba053a25698c77d6fb8ff9048f49bbc0fef3d4bc3b086d3b55564079760a26055126a5ad739f088f38635d2b6b05e1f8dcc2f93972a8fe737ba465
- SSDEEP 49152:4fDXYppEEn6GZ1S15U1cPVSTkyxI8rNxZXqTPcx:47zGi5gcKH
- TLSH T1C5C55B07FCA109E6C4AEA331896692567B71BC481F3223D32E50B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1