General
- Target 2026-09-06_0cc068b38fb5769c5d5f5c2c490f46d4_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample260907-j1htsascld
- SHA256 a47de2730f18175b9fa55a56426f39223de97032687e3259e6dbef75df351ac2
- MD5 0cc068b38fb5769c5d5f5c2c490f46d4
- SHA1 d09cfd0ab564bb1c9affe10692b748adf65ef58f
- SHA512 7971158fdf5cbbfc7c17b255549ce8af2e2317b7f0f36d7d31cd5884b0b2a95c7d7f4e5acc56aa42a60e50770e49f070bbd9e1096c422ea0f9f0a9242d5c7b51
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGcW:a9Eit7/Awwf
- TLSH T15FC55B07FCA108E6C1AEA331896692567B71BC481F3213D32E90B7B92F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-06_0cc068b38fb5769c5d5f5c2c490f46d4_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-09-06_0cc068b38fb5769c5d5f5c2c490f46d4_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-09-06_0cc068b38fb5769c5d5f5c2c490f46d4_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 a47de2730f18175b9fa55a56426f39223de97032687e3259e6dbef75df351ac2
- MD5 0cc068b38fb5769c5d5f5c2c490f46d4
- SHA1 d09cfd0ab564bb1c9affe10692b748adf65ef58f
- SHA512 7971158fdf5cbbfc7c17b255549ce8af2e2317b7f0f36d7d31cd5884b0b2a95c7d7f4e5acc56aa42a60e50770e49f070bbd9e1096c422ea0f9f0a9242d5c7b51
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGcW:a9Eit7/Awwf
- TLSH T15FC55B07FCA108E6C1AEA331896692567B71BC481F3213D32E90B7B92F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1