General
- Target 2026-10-22_92bd067b870b784c50b39c3a4f60540b_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample261024-e5hx5aw16q
- SHA256 03a9ff2552c809f86e235262d1e5d27711adb1e3caf9e7b24d70e5624054135b
- MD5 92bd067b870b784c50b39c3a4f60540b
- SHA1 4830c50e03db3d41cb95e16f1e631f59f540c47b
- SHA512 9762364bc2aec3062949ffbbac84b88b5682c194a2cc3a5e8a61d3e14c020fe4ba12e6289f0c298f999539e22cacef1d777d69d5e23e002fbc5c6113e1a2d97e
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGcy:a9Eit7/AwwX
- TLSH T1E2C55B07FCA108E6C1AEA331896692567B71BC481F3213D32E90B7B92F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-22_92bd067b870b784c50b39c3a4f60540b_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-10-22_92bd067b870b784c50b39c3a4f60540b_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target 2026-10-22_92bd067b870b784c50b39c3a4f60540b_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 03a9ff2552c809f86e235262d1e5d27711adb1e3caf9e7b24d70e5624054135b
- MD5 92bd067b870b784c50b39c3a4f60540b
- SHA1 4830c50e03db3d41cb95e16f1e631f59f540c47b
- SHA512 9762364bc2aec3062949ffbbac84b88b5682c194a2cc3a5e8a61d3e14c020fe4ba12e6289f0c298f999539e22cacef1d777d69d5e23e002fbc5c6113e1a2d97e
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGcy:a9Eit7/AwwX
- TLSH T1E2C55B07FCA108E6C1AEA331896692567B71BC481F3213D32E90B7B92F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1