General
- Target 2026-07-01_f42043d1ad34f9192e663f77df3986b7_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- Sample260701-b361dsb13p
- SHA256 c402ee3b870e26c39c107d3b233c3f19c3da7c54ded8836a9d1d71d992bea837
- MD5 f42043d1ad34f9192e663f77df3986b7
- SHA1 387f6d21287941592ed58ab3f1a97442d61b2573
- SHA512 34a34e0cc5af3589370c6a585459f8129bd44c4fc3b4318b90d10837918499f4b2ab1f38f0ef56a41eb58a7ae4f83f44c15c4f0253da7bf86c1c69cd685d69a2
- SSDEEP 49152:M7EE8XnNmzoarN9kZK90KXNp/m1FgcVx4DE:MYp4zpOKXeYE
- TLSH T1B0068E4BADD108EAC45A6735897657617B71FC091F3223C76E807B783E366E0AC3AB44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_f42043d1ad34f9192e663f77df3986b7_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_f42043d1ad34f9192e663f77df3986b7_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_f42043d1ad34f9192e663f77df3986b7_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.5MB
- SHA256 c402ee3b870e26c39c107d3b233c3f19c3da7c54ded8836a9d1d71d992bea837
- MD5 f42043d1ad34f9192e663f77df3986b7
- SHA1 387f6d21287941592ed58ab3f1a97442d61b2573
- SHA512 34a34e0cc5af3589370c6a585459f8129bd44c4fc3b4318b90d10837918499f4b2ab1f38f0ef56a41eb58a7ae4f83f44c15c4f0253da7bf86c1c69cd685d69a2
- SSDEEP 49152:M7EE8XnNmzoarN9kZK90KXNp/m1FgcVx4DE:MYp4zpOKXeYE
- TLSH T1B0068E4BADD108EAC45A6735897657617B71FC091F3223C76E807B783E366E0AC3AB44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE