General
- Target 2026-08-10_5a3c212e877c4a9d765897fd3be92a15_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.5MB
- Sample260810-kfrrmavcmh
- SHA256 e407b6a1e7b9b1d65b1f5c9ee5582799129c11462ec30249800b35328a0bc157
- MD5 5a3c212e877c4a9d765897fd3be92a15
- SHA1 4d074c798eee5f3067ea6e2f1ea4006e6451d208
- SHA512 53be36d0b03bf8e122784a7954c19bfb2ab00562528ff6b882f437ca665051be33289fb847f1f42728e654bfba19bcb5956a69e8e5d30b9fabe0c048b7f6e37b
- SSDEEP 49152:falS6sZkZTE6OZn3r5goO4TNO8XPcNMg2iAPncU4Vj6ZNpfg1AJyou:fr6G3r8kNqKBiAPcFjcjSfou
- TLSH T171267B03BE9548F5C195E73189774252BA74BC4C8B3133E32E60AAB82F763C06E79B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_5a3c212e877c4a9d765897fd3be92a15_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_5a3c212e877c4a9d765897fd3be92a15_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_5a3c212e877c4a9d765897fd3be92a15_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.5MB
- SHA256 e407b6a1e7b9b1d65b1f5c9ee5582799129c11462ec30249800b35328a0bc157
- MD5 5a3c212e877c4a9d765897fd3be92a15
- SHA1 4d074c798eee5f3067ea6e2f1ea4006e6451d208
- SHA512 53be36d0b03bf8e122784a7954c19bfb2ab00562528ff6b882f437ca665051be33289fb847f1f42728e654bfba19bcb5956a69e8e5d30b9fabe0c048b7f6e37b
- SSDEEP 49152:falS6sZkZTE6OZn3r5goO4TNO8XPcNMg2iAPncU4Vj6ZNpfg1AJyou:fr6G3r8kNqKBiAPcFjcjSfou
- TLSH T171267B03BE9548F5C195E73189774252BA74BC4C8B3133E32E60AAB82F763C06E79B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger