General
- Target 2026-08-09_30df821dd96c980fd31f74f36809158f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.2MB
- Sample260809-k7yz1scm7x
- SHA256 a2290013b61078708377a486790f4368102498018394723cfd3f53683e325fce
- MD5 30df821dd96c980fd31f74f36809158f
- SHA1 38dba88b3f7060817edea6c3c5e003d4e6745166
- SHA512 a585e7d5cc94eb1d16a659ecfdc9f0f1638f3ab8d20062c22ed9a44e038c8f0430583d3e0b5cd0adef8c540c5a3a9c921814cadfa28fc943b94daab85c824d81
- SSDEEP 49152:aMpihVRw0dNX1spEU2Oee0D9XDNGJMRATRN8UL9/ccysIyXxuS5bC:aTzaj2okV0TkU5/cczXO
- TLSH T1C1165A037EA448F9C099E73188AB5252B674BC4D4B3133E72E50BAB82F763D16D79B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_30df821dd96c980fd31f74f36809158f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_30df821dd96c980fd31f74f36809158f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_30df821dd96c980fd31f74f36809158f_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.2MB
- SHA256 a2290013b61078708377a486790f4368102498018394723cfd3f53683e325fce
- MD5 30df821dd96c980fd31f74f36809158f
- SHA1 38dba88b3f7060817edea6c3c5e003d4e6745166
- SHA512 a585e7d5cc94eb1d16a659ecfdc9f0f1638f3ab8d20062c22ed9a44e038c8f0430583d3e0b5cd0adef8c540c5a3a9c921814cadfa28fc943b94daab85c824d81
- SSDEEP 49152:aMpihVRw0dNX1spEU2Oee0D9XDNGJMRATRN8UL9/ccysIyXxuS5bC:aTzaj2okV0TkU5/cczXO
- TLSH T1C1165A037EA448F9C099E73188AB5252B674BC4D4B3133E72E50BAB82F763D16D79B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger