General
- Target 2026-09-08_8f3c90a8455662bc10c818e195b7896d_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample260908-ryxtxssdrb
- SHA256 857c19dbed3032e6c3bcf385d18c6b48435450448fb8987fd04c3b522059b58c
- MD5 8f3c90a8455662bc10c818e195b7896d
- SHA1 d3b840ad5639bd58407539ee2882280de2553736
- SHA512 f69acce75266def88155890c19d93a8db5d3d3a41850117e91760f7cad72ef9edd9d0f7c0dfda926367494f0e9204c9e655826424dde80a84951175d7d40b0ba
- SSDEEP 49152:4fDXYppEEn6GZ1S15U1cPVSTkyxI8rNxZXqTPcM:47zGi5gcK6
- TLSH T11EC55B07FCA109E6C4AEA331896692567B71BC481F3223D32E50B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-08_8f3c90a8455662bc10c818e195b7896d_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-09-08_8f3c90a8455662bc10c818e195b7896d_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-09-08_8f3c90a8455662bc10c818e195b7896d_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 857c19dbed3032e6c3bcf385d18c6b48435450448fb8987fd04c3b522059b58c
- MD5 8f3c90a8455662bc10c818e195b7896d
- SHA1 d3b840ad5639bd58407539ee2882280de2553736
- SHA512 f69acce75266def88155890c19d93a8db5d3d3a41850117e91760f7cad72ef9edd9d0f7c0dfda926367494f0e9204c9e655826424dde80a84951175d7d40b0ba
- SSDEEP 49152:4fDXYppEEn6GZ1S15U1cPVSTkyxI8rNxZXqTPcM:47zGi5gcK6
- TLSH T11EC55B07FCA109E6C4AEA331896692567B71BC481F3223D32E50B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
Adds Run key to start application
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1