Analysis
- max time kernel
150s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 09:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 3.8MB
- Sample260809-lxph9sywcs
- SHA256 3fe52711f8006205e3d82ecf228cde68d9a8b8d5be08cc330d6e8f99fa761c44
- MD5 b05d881d37fbd8973a561748b124c775
- SHA1 b8d210a4aab1774a3acdf6e599b4aeae40e50e6a
- SHA512 132dd67e9bd7bd2095a3cf1d1d1bf8c27fb2065d22c53b7c5fae0d6591e3a071b1cb07a3dee9aed5005d557a6977f7af10877849ae63bffd80d38cac60e5c3c6
- SSDEEP 49152:xEZkJTWTmoQJkqcY3nUK35RwvRSWGLocq:xDJka8K3bwvRSH7q
- TLSH T121068C03ACA189F5C099A731C4B79296B771BC086B3527D72E61AFB82FB63C05D36744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 5104 2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 5104 2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5104 2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5104 2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5104 2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5104 2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5104 2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_b05d881d37fbd8973a561748b124c775_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:5104