General
- Target 2026-09-10_9ad3bb2502be210db5d4ba36dcca583c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample260910-qcb5natfme
- SHA256 99b36349638e72c011f36a1d7767de0264b79db5ddf4eaf3055bc19afa9177cd
- MD5 9ad3bb2502be210db5d4ba36dcca583c
- SHA1 0ea9238600e5d8edd38e40cbf7a8e59fbd66dbf6
- SHA512 e1d8692999cc6e904c433def3050e16583f46783d3e63f8eb7d84813a1c10a121efd41a37cb9c99d2cbdfc8fa92d6a3e217cccd1114556c65173e677b5f6f558
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGcI:a9Eit7/AwwN
- TLSH T160C55B07FCA108E6C1AEA331896692567B71BC481F3213D72E90B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-10_9ad3bb2502be210db5d4ba36dcca583c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-09-10_9ad3bb2502be210db5d4ba36dcca583c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target 2026-09-10_9ad3bb2502be210db5d4ba36dcca583c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 99b36349638e72c011f36a1d7767de0264b79db5ddf4eaf3055bc19afa9177cd
- MD5 9ad3bb2502be210db5d4ba36dcca583c
- SHA1 0ea9238600e5d8edd38e40cbf7a8e59fbd66dbf6
- SHA512 e1d8692999cc6e904c433def3050e16583f46783d3e63f8eb7d84813a1c10a121efd41a37cb9c99d2cbdfc8fa92d6a3e217cccd1114556c65173e677b5f6f558
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGcI:a9Eit7/AwwN
- TLSH T160C55B07FCA108E6C1AEA331896692567B71BC481F3213D72E90B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1