General
- Target 2026-08-04_a09833f2e8c17cd60b039156e2827425_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.2MB
- Sample260804-gszffsgr4z
- SHA256 a286ea43c3e3b9abbe65037a9a545a1b677f5160ca92128b431807d29dea44ab
- MD5 a09833f2e8c17cd60b039156e2827425
- SHA1 6bc6ba34f014cbbfa73f7b7f1beef8369f1969b9
- SHA512 6dd795775ecf1be7866675c0af8b929f8363d16c0ba10af26f7f7790f4c1b8c318bac4f969d4b509faa5bb25632ab9283b3196dca5e41b4801c1321523921b41
- SSDEEP 49152:aNQynJETfD8RMb4LBcga0zo6rZkqK5002MVI0bCmyJShDo8cft:a62M90rZkqx0zI0bFyJShDoj
- TLSH T1C5F5AD07BCE098F5C09AA231D9B74181BB31BC484B3523EB2E90B6792F76BD05C76B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_a09833f2e8c17cd60b039156e2827425_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_a09833f2e8c17cd60b039156e2827425_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 3.2MB
- SHA256 a286ea43c3e3b9abbe65037a9a545a1b677f5160ca92128b431807d29dea44ab
- MD5 a09833f2e8c17cd60b039156e2827425
- SHA1 6bc6ba34f014cbbfa73f7b7f1beef8369f1969b9
- SHA512 6dd795775ecf1be7866675c0af8b929f8363d16c0ba10af26f7f7790f4c1b8c318bac4f969d4b509faa5bb25632ab9283b3196dca5e41b4801c1321523921b41
- SSDEEP 49152:aNQynJETfD8RMb4LBcga0zo6rZkqK5002MVI0bCmyJShDo8cft:a62M90rZkqx0zI0bFyJShDoj
- TLSH T1C5F5AD07BCE098F5C09AA231D9B74181BB31BC484B3523EB2E90B6792F76BD05C76B55
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger