General
- Target 2026-08-21_1b721d9d470c186b0d388aa4c74ac4fd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample260821-cfdwrs1ama
- SHA256 f209277bfac743575e38148d248aa0c11bd0a5fb83f3c3d09f75622453d1e386
- MD5 1b721d9d470c186b0d388aa4c74ac4fd
- SHA1 f815fe8914b8fdabc3e949dc7221830f33e7f019
- SHA512 6720412f027db040a22981bf50ae6b6d5883212e9d0f8d42ea2ba19b89e0d4ce13f5dee4dee3f65f4f619838a0370cf7f53e7fce0728c45bd5175da1d195d27b
- SSDEEP 49152:n4cZP4zQh75hG8UHEwO2jV4TkyxI4rfxZR8V4c5:nTvhWEv2Cu
- TLSH T182C53A07FCA108E6C4ADA331896692567B71BC491F3223D32E60B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-21_1b721d9d470c186b0d388aa4c74ac4fd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-21_1b721d9d470c186b0d388aa4c74ac4fd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-08-21_1b721d9d470c186b0d388aa4c74ac4fd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 f209277bfac743575e38148d248aa0c11bd0a5fb83f3c3d09f75622453d1e386
- MD5 1b721d9d470c186b0d388aa4c74ac4fd
- SHA1 f815fe8914b8fdabc3e949dc7221830f33e7f019
- SHA512 6720412f027db040a22981bf50ae6b6d5883212e9d0f8d42ea2ba19b89e0d4ce13f5dee4dee3f65f4f619838a0370cf7f53e7fce0728c45bd5175da1d195d27b
- SSDEEP 49152:n4cZP4zQh75hG8UHEwO2jV4TkyxI4rfxZR8V4c5:nTvhWEv2Cu
- TLSH T182C53A07FCA108E6C4ADA331896692567B71BC491F3223D32E60B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1