General
- Target 2026-07-08_f8936e2a446940cb400b43fc104cf23d_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- Sample260708-cf5pgshs8t
- SHA256 eef1a559100d2c08f55f079e1eb10833f0f84498c070100e60c63e6ce93ae94c
- MD5 f8936e2a446940cb400b43fc104cf23d
- SHA1 87b99fc279f3ab0394e85d6d713b85f8b51b8ba9
- SHA512 a07022ea0cc1a42b72d1000a4274ecaa82645d1a9f3950eee55a1419d3015f86f71ce4c74c7952b300e7752822b3b211a7845610210116e901c181beaac37ebf
- SSDEEP 49152:ixnOeT6xoUaynB+3Za0jXfBlMGk9ZQ18LUql4auqen5K:ix1G+g0jTiweLdlIx
- TLSH T187F58D47BCD008A5E4A6A23185A652927F717C4B0F3177E32E80F27C2E76ED059BB758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_f8936e2a446940cb400b43fc104cf23d_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f8936e2a446940cb400b43fc104cf23d_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f8936e2a446940cb400b43fc104cf23d_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- SHA256 eef1a559100d2c08f55f079e1eb10833f0f84498c070100e60c63e6ce93ae94c
- MD5 f8936e2a446940cb400b43fc104cf23d
- SHA1 87b99fc279f3ab0394e85d6d713b85f8b51b8ba9
- SHA512 a07022ea0cc1a42b72d1000a4274ecaa82645d1a9f3950eee55a1419d3015f86f71ce4c74c7952b300e7752822b3b211a7845610210116e901c181beaac37ebf
- SSDEEP 49152:ixnOeT6xoUaynB+3Za0jXfBlMGk9ZQ18LUql4auqen5K:ix1G+g0jTiweLdlIx
- TLSH T187F58D47BCD008A5E4A6A23185A652927F717C4B0F3177E32E80F27C2E76ED059BB758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.