Analysis
- max time kernel
148s - max time network
106s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 06:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 2.9MB
- Sample260715-g4ev7adv2n
- SHA256 39a5efdadf567ffb7a89dffffeb6f51e89ea02f4f727219da822b769faafade2
- MD5 9732ccef82d6d9a01043e3e3aca53463
- SHA1 e138af0fbb68cf6500e45111a19b67a69baa8aff
- SHA512 7ce09fdc9660fd360919cee7381980fab1806b07dc56e8e33517146e9c6dfaf0a25531117733cb3a40f9f295161a2ed60787f4b3f95614a89231f015c01ba9bf
- SSDEEP 49152:RsPP6bEg7dFIjwgCXM/T6DtoSVud2s9FsdAd3y4K5:RSRwvM/mg2s9FsdaZg
- TLSH T184E58C1A7CE109E5C4AAA73189B652927B75FC490F3563D72E90B7382F727E18C36B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 3204 2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3204 2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 3204 2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 3204 2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 3204 2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 3204 2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 3204 2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-15_9732ccef82d6d9a01043e3e3aca53463_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:3204