General
- Target 2026-07-20_eb25b759bcc5d8fce2485ecb124c27d3_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.9MB
- Sample260720-ek6tfsev5n
- SHA256 de968750fe8ad20ed2c45e673d4d33f703a8215cdc066662f5d4d3899f848019
- MD5 eb25b759bcc5d8fce2485ecb124c27d3
- SHA1 8e668b443d669e69de47ff960eade0b4720797c3
- SHA512 d9f19c60460e8f48e179ed7ddf9b71185a90cd620e15c1601713bf7a3ddd3fb4440bfacfd3b981ad23828e933e07de98dcded04b00bd6bb88db3ab28a6865500
- SSDEEP 49152:aeEQE1SgqtgFfeJqDxP4B+DytBRC9z2xOmgq:aewHfeJCxC+etBRqsOmT
- TLSH T114D59D0B7CD049FCE4AAA73298B26192BB35BC091F3627D31E80B7782E766D15D35790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_eb25b759bcc5d8fce2485ecb124c27d3_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_eb25b759bcc5d8fce2485ecb124c27d3_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_eb25b759bcc5d8fce2485ecb124c27d3_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.9MB
- SHA256 de968750fe8ad20ed2c45e673d4d33f703a8215cdc066662f5d4d3899f848019
- MD5 eb25b759bcc5d8fce2485ecb124c27d3
- SHA1 8e668b443d669e69de47ff960eade0b4720797c3
- SHA512 d9f19c60460e8f48e179ed7ddf9b71185a90cd620e15c1601713bf7a3ddd3fb4440bfacfd3b981ad23828e933e07de98dcded04b00bd6bb88db3ab28a6865500
- SSDEEP 49152:aeEQE1SgqtgFfeJqDxP4B+DytBRC9z2xOmgq:aewHfeJCxC+etBRqsOmT
- TLSH T114D59D0B7CD049FCE4AAA73298B26192BB35BC091F3627D31E80B7782E766D15D35790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Suspicious use of NtSetInformationThreadHideFromDebugger