General
- Target 2026-07-20_07006dec503f9b73cd40c4f529f7e769_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- Sample260720-2yptesav4s
- SHA256 3bb1bbf770b3249991e618a89a369197959fd68629f2bfbd4670b0b3b736de0f
- MD5 07006dec503f9b73cd40c4f529f7e769
- SHA1 ee015f1475a8d709c11a9784055eb6487f8b724c
- SHA512 1e1491fc00228c2b2bcff3db47c9a89de756ead0a2c43d469cd39f300ef2ce4d70066b781b443de9c452c15ac7898d59947f0c7a35184cb7e5ae8dae6d55fe85
- SSDEEP 49152:yiPwGXM9uQ+8XITw15hVvOxqy26OcC7vkkiKpoWLwtIqAJoi9e8rWSPn1nb+gF:yiYBjI29nMGLw2Z3M6WS9bDF
- TLSH T17AF58B077CE049F6C0AEE632C9B641967A75B8090B3533D73E60AA783E727C09D39B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_07006dec503f9b73cd40c4f529f7e769_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_07006dec503f9b73cd40c4f529f7e769_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_07006dec503f9b73cd40c4f529f7e769_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- SHA256 3bb1bbf770b3249991e618a89a369197959fd68629f2bfbd4670b0b3b736de0f
- MD5 07006dec503f9b73cd40c4f529f7e769
- SHA1 ee015f1475a8d709c11a9784055eb6487f8b724c
- SHA512 1e1491fc00228c2b2bcff3db47c9a89de756ead0a2c43d469cd39f300ef2ce4d70066b781b443de9c452c15ac7898d59947f0c7a35184cb7e5ae8dae6d55fe85
- SSDEEP 49152:yiPwGXM9uQ+8XITw15hVvOxqy26OcC7vkkiKpoWLwtIqAJoi9e8rWSPn1nb+gF:yiYBjI29nMGLw2Z3M6WS9bDF
- TLSH T17AF58B077CE049F6C0AEE632C9B641967A75B8090B3533D73E60AA783E727C09D39B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger