General
- Target 2026-07-03_65f45892e29471ad7587d71b9c08a731_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.9MB
- Sample260703-dgtt2sfv9k
- SHA256 dfffe7188a056a5166d4fa05b964b4fa4a2c2663ac6e5732edd2f7018d6fc09a
- MD5 65f45892e29471ad7587d71b9c08a731
- SHA1 e2d8cf55ca528907ad128be0f0f24eb85bf10a46
- SHA512 6300abeb72f75b0a7c2a4be74ed004fea72540da9630bbdb145de10389bf824ac8682f0f4bcda7adeaaac820b41665cb4b3cfdfbe8e8e1a2480f84b10b12d857
- SSDEEP 24576:/aHFuEAjBjGGoHaPlTytCnzWiC0QtqrQEWxD9pxapoyy0OL5MYZWVdyfpkSeTftS:/aHFDAtjOHol+t2iZMm9xmcaRd7tTl4l
- TLSH T105D5AE077CD109E9C46A633688B64582BB70BC190F7223C72E50B7B82FB67D0AE76755
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_65f45892e29471ad7587d71b9c08a731_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_65f45892e29471ad7587d71b9c08a731_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_65f45892e29471ad7587d71b9c08a731_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.9MB
- SHA256 dfffe7188a056a5166d4fa05b964b4fa4a2c2663ac6e5732edd2f7018d6fc09a
- MD5 65f45892e29471ad7587d71b9c08a731
- SHA1 e2d8cf55ca528907ad128be0f0f24eb85bf10a46
- SHA512 6300abeb72f75b0a7c2a4be74ed004fea72540da9630bbdb145de10389bf824ac8682f0f4bcda7adeaaac820b41665cb4b3cfdfbe8e8e1a2480f84b10b12d857
- SSDEEP 24576:/aHFuEAjBjGGoHaPlTytCnzWiC0QtqrQEWxD9pxapoyy0OL5MYZWVdyfpkSeTftS:/aHFDAtjOHol+t2iZMm9xmcaRd7tTl4l
- TLSH T105D5AE077CD109E9C46A633688B64582BB70BC190F7223C72E50B7B82FB67D0AE76755
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger