General
- Target 2026-09-04_511adf4c5182ba18752159e44a463af2_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample260905-m1ph4ssgpd
- SHA256 0d9b3c69f8f074510614207c295a776fdf9a5d84539a2540a28aec949114efc2
- MD5 511adf4c5182ba18752159e44a463af2
- SHA1 7f6e16ad6a7db060d5661020ba8373c6e80d39d2
- SHA512 ab17ed153d72f6d79064f74e7cc36cbe225b603131868e002e46d8f838f809cefcd2ad6649bc7f5b21b14cc350a474daca25f51cac2a05591e7f64f3e4d563cd
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGcR:a9Eit7/Awww
- TLSH T12DC55B07FCA108E6C1AEA331896692567B71BC481F3213D32E90B7B92F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-04_511adf4c5182ba18752159e44a463af2_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-09-04_511adf4c5182ba18752159e44a463af2_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target 2026-09-04_511adf4c5182ba18752159e44a463af2_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 0d9b3c69f8f074510614207c295a776fdf9a5d84539a2540a28aec949114efc2
- MD5 511adf4c5182ba18752159e44a463af2
- SHA1 7f6e16ad6a7db060d5661020ba8373c6e80d39d2
- SHA512 ab17ed153d72f6d79064f74e7cc36cbe225b603131868e002e46d8f838f809cefcd2ad6649bc7f5b21b14cc350a474daca25f51cac2a05591e7f64f3e4d563cd
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGcR:a9Eit7/Awww
- TLSH T12DC55B07FCA108E6C1AEA331896692567B71BC481F3213D32E90B7B92F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1