General
- Target 2026-07-08_e76493d0c427bc29b88cd12cb74731d8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.1MB
- Sample260708-j9pcxses7n
- SHA256 8f192ca3b28b25d006dfd3b85970ba459bd7a614caae0625f1668de42a37e179
- MD5 e76493d0c427bc29b88cd12cb74731d8
- SHA1 fd019cc062123ca4dff7a63e5806891c04e1e25f
- SHA512 aa622632e8ed06dbc8e7f000e6e3d3bb27b4dd6cd94b12ebf7ee04f3f9a40ef5bf90bbe3f454bbece3715efc1916ee1a815b270eb8a7ccc3b187f078712ea8e4
- SSDEEP 49152:PO626FeHQiEM0uwEtP2yucK9seiJjtA6mbwe/foUQkMM4a:POKTaxtjuR90jmbQwXN
- TLSH T164E5AE077DE109EAC8AAA3328DB642967B74BC094F3123D72E50B6382F72BD19C75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_e76493d0c427bc29b88cd12cb74731d8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_e76493d0c427bc29b88cd12cb74731d8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_e76493d0c427bc29b88cd12cb74731d8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.1MB
- SHA256 8f192ca3b28b25d006dfd3b85970ba459bd7a614caae0625f1668de42a37e179
- MD5 e76493d0c427bc29b88cd12cb74731d8
- SHA1 fd019cc062123ca4dff7a63e5806891c04e1e25f
- SHA512 aa622632e8ed06dbc8e7f000e6e3d3bb27b4dd6cd94b12ebf7ee04f3f9a40ef5bf90bbe3f454bbece3715efc1916ee1a815b270eb8a7ccc3b187f078712ea8e4
- SSDEEP 49152:PO626FeHQiEM0uwEtP2yucK9seiJjtA6mbwe/foUQkMM4a:POKTaxtjuR90jmbQwXN
- TLSH T164E5AE077DE109EAC8AAA3328DB642967B74BC094F3123D72E50B6382F72BD19C75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects WallStealer stealer
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext