General
- Target 2026-10-30_7d23a24112a8b869a896f3acdd08ae2b_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample261030-3xtawssxbs
- SHA256 14eff7a7eaf3069cf550d6a159d93463857c939be90d0ad569a3e646200e7830
- MD5 7d23a24112a8b869a896f3acdd08ae2b
- SHA1 2f940b62c85c8ee88444bee0de8156a49bc5977c
- SHA512 0d9f0ba311521ae382fb0e0cf916370c20c9b370a7ff97273fa59990096ef6dfc129e9c95e6290ae21a12f86457d35899c70e79ed12f870781041e306f11bad8
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGci:a9Eit7/Awwj
- TLSH T187C55B07FCA108E6C1AEA331896692567B71BC481F3213D72E90B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-30_7d23a24112a8b869a896f3acdd08ae2b_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-10-30_7d23a24112a8b869a896f3acdd08ae2b_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target 2026-10-30_7d23a24112a8b869a896f3acdd08ae2b_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 14eff7a7eaf3069cf550d6a159d93463857c939be90d0ad569a3e646200e7830
- MD5 7d23a24112a8b869a896f3acdd08ae2b
- SHA1 2f940b62c85c8ee88444bee0de8156a49bc5977c
- SHA512 0d9f0ba311521ae382fb0e0cf916370c20c9b370a7ff97273fa59990096ef6dfc129e9c95e6290ae21a12f86457d35899c70e79ed12f870781041e306f11bad8
- SSDEEP 49152:azFAobfN9tQcKo8kt/BxC4AVVITeIWrknO5MGci:a9Eit7/Awwj
- TLSH T187C55B07FCA108E6C1AEA331896692567B71BC481F3213D72E90B7B82F72BE05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
Adds Run key to start application
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1