Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/09/2026, 23:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-22_f4843587f6eed280d80dcba818772d9d_coinminer_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-22_f4843587f6eed280d80dcba818772d9d_coinminer_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-22_f4843587f6eed280d80dcba818772d9d_coinminer_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
- Size 2.4MB
- Sample260922-3e33datgje
- SHA256 c0a3ee03d3b03073273f03d935f1423b196c9dd788dd7f9d5c937d7e1fdc350d
- MD5 f4843587f6eed280d80dcba818772d9d
- SHA1 f39f5c4c644a6651090261f6f5466d0c82c1c480
- SHA512 af4941d8741f9b900603125f33a1f8f613bfe369dc00b67664d3d6a8a778ca79e06369ce7577e4dab837101bd5571208ee88d72c2fdc706e01574cf52bcad334
- SSDEEP 24576:2i8npwEoGjDluJgrtKOBH/4aRhn5WlPUqr1bkxeeotq:OwvGjDSe5CQo0
- TLSH T108B53957F8E69C64C8AE92709469811BE9727C180FB613DF5790B7381F737E04A3AB84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://43.143.198.113:4567/mq2M
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; BOIE9;ENUS)
Signatures
- Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-22_f4843587f6eed280d80dcba818772d9d_coinminer_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-22_f4843587f6eed280d80dcba818772d9d_coinminer_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"1⤵PID:1676