Analysis
- max time kernel
150s - max time network
117s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 02:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 4.1MB
- Sample260803-c95ata1vav
- SHA256 bc5da4f8a024cc030d2ac827df0f5bc2291c139f0a093385327eef3b1e8937f9
- MD5 3bf71b586508672064e1451e91917a0f
- SHA1 2a9fa343402978f7cc0a529a4b6957fc642416c1
- SHA512 525404fc8c44347c74ae5a04930816afd0657e85d6f55b59abea2d1d4b5c410420dc201ffe251ea42e52279a4430c5692f8755876bb82c3a1725734d7c4d1fc3
- SSDEEP 49152:F8h8MRCMej3IXZXtGHTM9NoSKzvDPwRT7Vum4oK:FR0axSKvkV8J
- TLSH T1CE169E03BD9448FAC1A8A73688A36216BB70B80D4B3173E32E527E742F76BD19D75744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 5676 2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 5676 2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5676 2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5676 2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5676 2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5676 2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe 5676 2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_3bf71b586508672064e1451e91917a0f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:5676