General
- Target 2026-08-08_86e104d724e61c49fe4ab08312cba671_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 4.3MB
- Sample260808-fj129a1ane
- SHA256 5803a0dac6ec415c4f5c3da85ff4d65c517e6243d41f3fe4b58fcdfc6aca5c19
- MD5 86e104d724e61c49fe4ab08312cba671
- SHA1 103ba20d2ca6eed0803aea4dc2bc26c6a6aa3a01
- SHA512 fb247adb0e8d9f7fa7f222e2aa653810041ffd8e4ccdf0f94a13a484c454bfdd806c8789ba5fb80ff01056792c838764a4de12f3186c6a31e5f63b84af2cc6e3
- SSDEEP 49152:NISRk/DgAub1G2zfuipJBpYFcwaGWEN0o8sVN4/cw1m:NNxG2HpQcwjbv8Yh
- TLSH T15E267A43BC9148FAC0D5A73188B75256BB71BC0C1B3223D32E60ABB82E767D15E76B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_86e104d724e61c49fe4ab08312cba671_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_86e104d724e61c49fe4ab08312cba671_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_86e104d724e61c49fe4ab08312cba671_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 4.3MB
- SHA256 5803a0dac6ec415c4f5c3da85ff4d65c517e6243d41f3fe4b58fcdfc6aca5c19
- MD5 86e104d724e61c49fe4ab08312cba671
- SHA1 103ba20d2ca6eed0803aea4dc2bc26c6a6aa3a01
- SHA512 fb247adb0e8d9f7fa7f222e2aa653810041ffd8e4ccdf0f94a13a484c454bfdd806c8789ba5fb80ff01056792c838764a4de12f3186c6a31e5f63b84af2cc6e3
- SSDEEP 49152:NISRk/DgAub1G2zfuipJBpYFcwaGWEN0o8sVN4/cw1m:NNxG2HpQcwjbv8Yh
- TLSH T15E267A43BC9148FAC0D5A73188B75256BB71BC0C1B3223D32E60ABB82E767D15E76B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger