General
- Target 2026-08-11_9f57339cd0881fad416804ea50899057_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.5MB
- Sample260811-wta7ksff78
- SHA256 1b6ae02e0a9ec5a1509f389b5865880dc843e6f4efd86da8b1894b7a0f467530
- MD5 9f57339cd0881fad416804ea50899057
- SHA1 6a054e51db623644e7696765fa17c3f64912867f
- SHA512 7bccd4e879f3547d9ac669a747c454e633bccf7fd2130994176a7921e4df6317e2bf4798135ad1c8b9cca3884c96c9838262c820e71a286bb41c9a27ed261d9a
- SSDEEP 49152:igH4aDItp1AOlnpToS1DN2dorbkJqIhQDeAubwxAgyh:ijvpTX1RByyyh
- TLSH T1EF266B03BE9148F5C095E73589B74652BA74BC4C9B3533D32E60AAB82F763C06E79B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_9f57339cd0881fad416804ea50899057_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_9f57339cd0881fad416804ea50899057_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_9f57339cd0881fad416804ea50899057_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.5MB
- SHA256 1b6ae02e0a9ec5a1509f389b5865880dc843e6f4efd86da8b1894b7a0f467530
- MD5 9f57339cd0881fad416804ea50899057
- SHA1 6a054e51db623644e7696765fa17c3f64912867f
- SHA512 7bccd4e879f3547d9ac669a747c454e633bccf7fd2130994176a7921e4df6317e2bf4798135ad1c8b9cca3884c96c9838262c820e71a286bb41c9a27ed261d9a
- SSDEEP 49152:igH4aDItp1AOlnpToS1DN2dorbkJqIhQDeAubwxAgyh:ijvpTX1RByyyh
- TLSH T1EF266B03BE9148F5C095E73589B74652BA74BC4C9B3533D32E60AAB82F763C06E79B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger