General
- Target 2026-07-20_bbbb9f4c93dc324862c8216567fc48cc_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- Sample260720-2n2p8sgs3m
- SHA256 572cd7042d2023c527a7ab53d088deede7ab6e5ca2db0bcf078d96204dcc7607
- MD5 bbbb9f4c93dc324862c8216567fc48cc
- SHA1 b0aacac7b2dbd7785631a456239a1f45a7a794bf
- SHA512 182f3c2174b18e3ad7a9de7e188f7dbb08c712180c8a04784bd4ed55629fdc57dc3da357f2c47610bf6cdd7c5c2da56967ffd59d70c0ebafcfe156eac6eb5194
- SSDEEP 49152:2I7GlSmn856KrEHwYg+uUtsKREoUnkXPcOPJS3mCmuui893n+d1:2Iy0Ei+9gWHxi89nK1
- TLSH T12AF58C07AC9149F5D09A9232CA7256927BB1BC0E0B7533D73EA47B782E727C09D36B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_bbbb9f4c93dc324862c8216567fc48cc_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_bbbb9f4c93dc324862c8216567fc48cc_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_bbbb9f4c93dc324862c8216567fc48cc_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- SHA256 572cd7042d2023c527a7ab53d088deede7ab6e5ca2db0bcf078d96204dcc7607
- MD5 bbbb9f4c93dc324862c8216567fc48cc
- SHA1 b0aacac7b2dbd7785631a456239a1f45a7a794bf
- SHA512 182f3c2174b18e3ad7a9de7e188f7dbb08c712180c8a04784bd4ed55629fdc57dc3da357f2c47610bf6cdd7c5c2da56967ffd59d70c0ebafcfe156eac6eb5194
- SSDEEP 49152:2I7GlSmn856KrEHwYg+uUtsKREoUnkXPcOPJS3mCmuui893n+d1:2Iy0Ei+9gWHxi89nK1
- TLSH T12AF58C07AC9149F5D09A9232CA7256927BB1BC0E0B7533D73EA47B782E727C09D36B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger