General
- Target 2026-06-04_9f550ad4a5ef5d66c2f789bf368a8474_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.5MB
- Sample260604-ydewyadx2n
- SHA256 489e533bdaaad5728bd0a6f7af1504dccd569ecb9921740dea739ac51f86d3f5
- MD5 9f550ad4a5ef5d66c2f789bf368a8474
- SHA1 96ec0a13f27f971f605a874167ea0ffc84137621
- SHA512 deadb4bc5814a410746890808f6739bbd0afa991833e74666394662025df8082ebc4ef9788522885da9b36edac1d7b4913c3d8cc8fa70eb35eaee7993e49877b
- SSDEEP 49152:MOOBvlcldLT2b/gLBl/964eTMN4/Io+dDzKBSonF4Jlg:MfORb9o+d/aSoT
- TLSH T1F3066B0378D108FCC491B33254BA7592BA25B8441B3A6BD72F626E782E377C19D3735A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_9f550ad4a5ef5d66c2f789bf368a8474_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_9f550ad4a5ef5d66c2f789bf368a8474_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_9f550ad4a5ef5d66c2f789bf368a8474_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.5MB
- SHA256 489e533bdaaad5728bd0a6f7af1504dccd569ecb9921740dea739ac51f86d3f5
- MD5 9f550ad4a5ef5d66c2f789bf368a8474
- SHA1 96ec0a13f27f971f605a874167ea0ffc84137621
- SHA512 deadb4bc5814a410746890808f6739bbd0afa991833e74666394662025df8082ebc4ef9788522885da9b36edac1d7b4913c3d8cc8fa70eb35eaee7993e49877b
- SSDEEP 49152:MOOBvlcldLT2b/gLBl/964eTMN4/Io+dDzKBSonF4Jlg:MfORb9o+d/aSoT
- TLSH T1F3066B0378D108FCC491B33254BA7592BA25B8441B3A6BD72F626E782E377C19D3735A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Suspicious use of NtSetInformationThreadHideFromDebugger