Analysis
- max time kernel
150s - max time network
136s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 03:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 3.5MB
- Sample260808-egh8zshl3s
- SHA256 e3be7ac36b672045e47c4bb9533b2aa4065b7cf008682fc4862a14694a4ebd13
- MD5 29e2077dfd46a4610f012fee1cb83b0c
- SHA1 1c5bf1b31aab76aa3c9b70abccd94a394bb72390
- SHA512 846ff0e64ec38762cb902208496e00fc78c1cb2b8641412c42b9cfffa7a141d8b79fb85fe3851a269d595e3eda75649d041efb6ca1b6827f4d1634af0f63dfca
- SSDEEP 98304:rWvi8azA4GcXQXAxX/dopi/OnmYV2dWz3jy/kF9kOPBj8GBDwb/l6Inbm3FNctK:r6NNH
- TLSH T1B4067C07BC9249F6C0A9A735C8B74652BA75BC084B3233D72EA0BAB82F727C15D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1144 2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1144 2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 1144 2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 1144 2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 1144 2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 1144 2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 1144 2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_29e2077dfd46a4610f012fee1cb83b0c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:1144