General
- Target 2026-08-09_b7d80493dd1fc36b249bdd69d1a5377e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 4.3MB
- Sample260809-cgrh9agj4t
- SHA256 8900203d200a6bb3d5c40a24e2aabe688c1ae28ac2620234cdb1b1fe4bab0559
- MD5 b7d80493dd1fc36b249bdd69d1a5377e
- SHA1 85aff4273d01fa3f95d8ad3869077fad14dd5b14
- SHA512 6de9e6629bab66c34b5fe38bb96b127160bdd68e5660598e9400552aa286abc7d9f3201b79529b5a7b372ab08efc75f762ae57e8977a8f4fb2ac03da31475853
- SSDEEP 49152:lLGIRkIHvZT+NzvJ3DxUSQ/ixXLb/GDsV90Uc5g:lD6NrBZxX3+D09
- TLSH T1AC266B43BD9149FAC0D6A33188A75256BB71BC0C1B3523D32E60BBB82E767D15E72B14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_b7d80493dd1fc36b249bdd69d1a5377e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b7d80493dd1fc36b249bdd69d1a5377e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_b7d80493dd1fc36b249bdd69d1a5377e_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 4.3MB
- SHA256 8900203d200a6bb3d5c40a24e2aabe688c1ae28ac2620234cdb1b1fe4bab0559
- MD5 b7d80493dd1fc36b249bdd69d1a5377e
- SHA1 85aff4273d01fa3f95d8ad3869077fad14dd5b14
- SHA512 6de9e6629bab66c34b5fe38bb96b127160bdd68e5660598e9400552aa286abc7d9f3201b79529b5a7b372ab08efc75f762ae57e8977a8f4fb2ac03da31475853
- SSDEEP 49152:lLGIRkIHvZT+NzvJ3DxUSQ/ixXLb/GDsV90Uc5g:lD6NrBZxX3+D09
- TLSH T1AC266B43BD9149FAC0D6A33188A75256BB71BC0C1B3523D32E60BBB82E767D15E72B14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger