General
- Target 2026-08-10_94aa8c4ade2f5db558c7855faed037ed_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.5MB
- Sample260810-gtcm3scl4w
- SHA256 3e728ad2c89e10217c174377627b535cf942fc44c7a6804f8f621c6861fe4a44
- MD5 94aa8c4ade2f5db558c7855faed037ed
- SHA1 58b2e6972e6cd5a878616417511cdb1d4a8c02a5
- SHA512 194dd87dff7c1fda09a3f1a897323b5c405019e0c249158bd229f1c37b2347a0543f88af4a04dc5402e18e7714ee45e920f595f4302ae3b11174d0e3bf8c8173
- SSDEEP 49152:KjXhfL3MVfDAfJaURVZkeZbGWtj7ZYusBHtdV0H22E5kKuUkP7AGyYH:KFN3RtZbQBHtL0HZYCUkP7kYH
- TLSH T1E0267B03BE9149F9C1A5E73189774252BA74BC4C9B3133E32E60AAB82F763C06D75B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_94aa8c4ade2f5db558c7855faed037ed_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_94aa8c4ade2f5db558c7855faed037ed_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_94aa8c4ade2f5db558c7855faed037ed_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.5MB
- SHA256 3e728ad2c89e10217c174377627b535cf942fc44c7a6804f8f621c6861fe4a44
- MD5 94aa8c4ade2f5db558c7855faed037ed
- SHA1 58b2e6972e6cd5a878616417511cdb1d4a8c02a5
- SHA512 194dd87dff7c1fda09a3f1a897323b5c405019e0c249158bd229f1c37b2347a0543f88af4a04dc5402e18e7714ee45e920f595f4302ae3b11174d0e3bf8c8173
- SSDEEP 49152:KjXhfL3MVfDAfJaURVZkeZbGWtj7ZYusBHtdV0H22E5kKuUkP7AGyYH:KFN3RtZbQBHtL0HZYCUkP7kYH
- TLSH T1E0267B03BE9149F9C1A5E73189774252BA74BC4C9B3133E32E60AAB82F763C06D75B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger