Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/08/2026, 22:45

General

  • Target
    2026-08-08_8e7ec2ed7d908708b54dc88f49e87ac9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
  • Size 4.0MB
  • Sample260808-2pdd2aff78
  • SHA256 5cef6313f6bc9da8f008aa9f62bfc3ff346229ed3db074a5259a0520556a25f8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_8e7ec2ed7d908708b54dc88f49e87ac9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-08_8e7ec2ed7d908708b54dc88f49e87ac9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:2504

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2504-0-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-1-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-2-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-3-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-4-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-5-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-6-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-7-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-8-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-9-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-10-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-11-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-12-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-13-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-14-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-15-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-16-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-17-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-18-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-19-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-20-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-21-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-22-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-23-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-24-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-25-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-26-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-27-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-28-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-29-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-30-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-31-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-32-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-33-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-34-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-35-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-36-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-37-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-38-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-39-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-40-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-41-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-42-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-43-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-44-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-45-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-46-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-47-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-48-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-49-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-50-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-51-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-52-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-53-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-54-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-55-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-56-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-57-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-58-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-59-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-60-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-61-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-62-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-63-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-64-0x0000000410000000-0x000000041023B000-memory.dmp

        memory/2504-65-0x0000000410000000-0x000000041023B000-memory.dmp