General
- Target 2026-08-09_7891bfb34753a34794d00fcbe60958d9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.2MB
- Sample260809-jmvanatbqd
- SHA256 4a836b23c8dcec4d1160d3614581d9650eaaf87d0be2f222d313b164b15d2f9f
- MD5 7891bfb34753a34794d00fcbe60958d9
- SHA1 64b7d2f1c0b2c00a3515414f7e288929b1c58926
- SHA512 63c1487e45df3b1c1d01041506dc36cf56de4e97a4003eed9f4e24f7053110c690291c666b9cb4b687719bd234026d85421eeba1b7179d9dd284bf84b9c935a9
- SSDEEP 49152:fYmI9seAc3KMhmgLaSSTTG4YzxRVZLY1m3/yJ1DYNxgv5yu:fs97hmbSD3U16qJVYN2
- TLSH T16B165A037EA548F5C099E73188AB5252B675BC4D8B3133E72E507AB82F763D0AD79B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_7891bfb34753a34794d00fcbe60958d9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_7891bfb34753a34794d00fcbe60958d9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_7891bfb34753a34794d00fcbe60958d9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.2MB
- SHA256 4a836b23c8dcec4d1160d3614581d9650eaaf87d0be2f222d313b164b15d2f9f
- MD5 7891bfb34753a34794d00fcbe60958d9
- SHA1 64b7d2f1c0b2c00a3515414f7e288929b1c58926
- SHA512 63c1487e45df3b1c1d01041506dc36cf56de4e97a4003eed9f4e24f7053110c690291c666b9cb4b687719bd234026d85421eeba1b7179d9dd284bf84b9c935a9
- SSDEEP 49152:fYmI9seAc3KMhmgLaSSTTG4YzxRVZLY1m3/yJ1DYNxgv5yu:fs97hmbSD3U16qJVYN2
- TLSH T16B165A037EA548F5C099E73188AB5252B675BC4D8B3133E72E507AB82F763D0AD79B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger