General
- Target 2026-07-08_7797f581fcfc6f5827d0b4192c8a3959_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.8MB
- Sample260708-e437nsay7y
- SHA256 d7227793259b2ff1f412e1a9a1913e5769a8dd3f01035b0195a68afaecaf7362
- MD5 7797f581fcfc6f5827d0b4192c8a3959
- SHA1 ff18cb537cc3bc1bcec1568a6bd6f37a75ce3235
- SHA512 ad1f47e9e679478b01f9425945af7131a6120285de349375f0fa00a05b74b441251882d7c5bea01a770f2dc4ec5356a2590b0f8a28fcd4e66dec99599d085dd7
- SSDEEP 49152:GCigus3gkcNhQ3Ym7PgbEZAyhIXe+/xh3uPr:GlzQHAIG/ePr
- TLSH T1CDD55B43ACD049AAE059B331C9B25163BA75BC4E0B3623C32E50BB3D2F76BD15976748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_7797f581fcfc6f5827d0b4192c8a3959_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_7797f581fcfc6f5827d0b4192c8a3959_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_7797f581fcfc6f5827d0b4192c8a3959_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.8MB
- SHA256 d7227793259b2ff1f412e1a9a1913e5769a8dd3f01035b0195a68afaecaf7362
- MD5 7797f581fcfc6f5827d0b4192c8a3959
- SHA1 ff18cb537cc3bc1bcec1568a6bd6f37a75ce3235
- SHA512 ad1f47e9e679478b01f9425945af7131a6120285de349375f0fa00a05b74b441251882d7c5bea01a770f2dc4ec5356a2590b0f8a28fcd4e66dec99599d085dd7
- SSDEEP 49152:GCigus3gkcNhQ3Ym7PgbEZAyhIXe+/xh3uPr:GlzQHAIG/ePr
- TLSH T1CDD55B43ACD049AAE059B331C9B25163BA75BC4E0B3623C32E50BB3D2F76BD15976748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.