General
- Target 2026-09-01_0ae3cb2ef77353ed720a25eb366e9cbd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample260903-t461ws1fke
- SHA256 8ec41210351393c68968f5d3406d3def077dbfb39644295c2b352fb5494e1107
- MD5 0ae3cb2ef77353ed720a25eb366e9cbd
- SHA1 19f959f7b18e76e36f89a97e12bce5266b86ac9a
- SHA512 09a10ff207b1d685ecdc06997b511319ccdad589877651143a394d86768eb1fcbff2c4a5dc91eb102ad2afea0acdc9b8e97e1d32ced18351e7baeda650104907
- SSDEEP 49152:4fDXYppEEn6GZ1S15U1cPVSTkyxI8rNxZXqTPc7:47zGi5gcKx
- TLSH T111C55B07FCA109E6C4AEA331896692567B71BC481F3223D32E50B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-01_0ae3cb2ef77353ed720a25eb366e9cbd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-09-01_0ae3cb2ef77353ed720a25eb366e9cbd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-09-01_0ae3cb2ef77353ed720a25eb366e9cbd_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 8ec41210351393c68968f5d3406d3def077dbfb39644295c2b352fb5494e1107
- MD5 0ae3cb2ef77353ed720a25eb366e9cbd
- SHA1 19f959f7b18e76e36f89a97e12bce5266b86ac9a
- SHA512 09a10ff207b1d685ecdc06997b511319ccdad589877651143a394d86768eb1fcbff2c4a5dc91eb102ad2afea0acdc9b8e97e1d32ced18351e7baeda650104907
- SSDEEP 49152:4fDXYppEEn6GZ1S15U1cPVSTkyxI8rNxZXqTPc7:47zGi5gcKx
- TLSH T111C55B07FCA109E6C4AEA331896692567B71BC481F3223D32E50B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1