General
- Target 2026-08-21_1655daa7aa4c7b7e9c015af5097734d0_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 1.7MB
- Sample260822-w984jsbl2y
- SHA256 99c00bdbb2c1679018c9ac6d0333fcd7f01b4f8ed277f1a138a23e08e0073a14
- MD5 1655daa7aa4c7b7e9c015af5097734d0
- SHA1 91bcffcc757d611fdf8fa0d31e972d5b05fdb6f6
- SHA512 60f908b2a064980f1c467156a67a9a042f686338c2b9de7011b8100a3590ca98620185df5310692c3793c446497c498007c63f07431bcf5266807372f0b01d66
- SSDEEP 24576:5DhPp0SgYCG59iuuJc131zQGoPRqRFbztKa:5DFp05GzfE
- TLSH T1F4853A17FCD238ABD0AAB2324962A141BA61BC583F3113D73EA0B77C2F726D05A75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_1655daa7aa4c7b7e9c015af5097734d0_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_1655daa7aa4c7b7e9c015af5097734d0_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://140.143.239.224:8050/i9Uf
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; BOIE9;ENUS)
Targets
-
- Target 2026-08-21_1655daa7aa4c7b7e9c015af5097734d0_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 1.7MB
- SHA256 99c00bdbb2c1679018c9ac6d0333fcd7f01b4f8ed277f1a138a23e08e0073a14
- MD5 1655daa7aa4c7b7e9c015af5097734d0
- SHA1 91bcffcc757d611fdf8fa0d31e972d5b05fdb6f6
- SHA512 60f908b2a064980f1c467156a67a9a042f686338c2b9de7011b8100a3590ca98620185df5310692c3793c446497c498007c63f07431bcf5266807372f0b01d66
- SSDEEP 24576:5DhPp0SgYCG59iuuJc131zQGoPRqRFbztKa:5DFp05GzfE
- TLSH T1F4853A17FCD238ABD0AAB2324962A141BA61BC583F3113D73EA0B77C2F726D05A75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.