General
- Target 2026-08-10_ac1a252c3949e1a81e33e860c28e7cb1_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.5MB
- Sample260810-h77aaadk51
- SHA256 61c69356f4bec37a20342bdd6c7359a2dc45e6f98a4d69168adbd35737f351db
- MD5 ac1a252c3949e1a81e33e860c28e7cb1
- SHA1 080ed17b4843603ec8ac957cba10f6b04b5a54b0
- SHA512 221a4c296d26a59ca1c97e9286c1a7cfd54d12682b04ad4a6868f26f9a4c12609520d53c573a1a69c5f744425053addecd935f806608447b4801dba3de247244
- SSDEEP 49152:ZUnSSfFxntMNAuPBQjPgE90cg/xAPv84nZBwR/NAAy+F:ZWVSQjxlGKsuPwR/N2+F
- TLSH T172265B03BE9548FAC095E73189B74652BA74BC4C5B3133E32E60AAB42F763C06D78B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_ac1a252c3949e1a81e33e860c28e7cb1_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_ac1a252c3949e1a81e33e860c28e7cb1_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_ac1a252c3949e1a81e33e860c28e7cb1_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.5MB
- SHA256 61c69356f4bec37a20342bdd6c7359a2dc45e6f98a4d69168adbd35737f351db
- MD5 ac1a252c3949e1a81e33e860c28e7cb1
- SHA1 080ed17b4843603ec8ac957cba10f6b04b5a54b0
- SHA512 221a4c296d26a59ca1c97e9286c1a7cfd54d12682b04ad4a6868f26f9a4c12609520d53c573a1a69c5f744425053addecd935f806608447b4801dba3de247244
- SSDEEP 49152:ZUnSSfFxntMNAuPBQjPgE90cg/xAPv84nZBwR/NAAy+F:ZWVSQjxlGKsuPwR/N2+F
- TLSH T172265B03BE9548FAC095E73189B74652BA74BC4C5B3133E32E60AAB42F763C06D78B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger