Analysis
- max time kernel
148s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 00:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 4.0MB
- Sample260802-aek8caak4x
- SHA256 aa2494c6e7f071bba912a450c50d5e4671c087a89546c21ecf697d1e1bc00498
- MD5 a3c353965f1c84de2448a4e510a726c8
- SHA1 7f6484f58ab5f10bda4d6985bca82c478cee88b5
- SHA512 622a8d1b1be57a737fb2dc5c1ddc364100dc3f1a0d4b3cae5810170772bfd8b6d2c42cc9adf1fad22a9cdc03f3ae50209b5389f32cff5af23f9198b05cb34bdd
- SSDEEP 49152:up/yoOdKtIY89sY9phBTil3h7ciKtNr0gnT07N3axzLrsC:u8IER80IpmLYC
- TLSH T194168C07AD9488FAC099E73589B769257774B8084B3137EB2E60BEB42F723E19D31354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2776 2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2776 2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 2776 2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 2776 2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 2776 2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 2776 2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 2776 2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-01_a3c353965f1c84de2448a4e510a726c8_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:2776