e58fae236af6cf49061756eb456a922f513e889e732b3136966307827a20f578

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 05:45

Target
2026-08-10_e6c8cf1675bdd36a3b681bbc029c9567_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Size 15.0MB
Sample260810-gf456ssbnd
SHA256 e58fae236af6cf49061756eb456a922f513e889e732b3136966307827a20f578
MD5 e6c8cf1675bdd36a3b681bbc029c9567
SHA1 6e6a0f28b13b39ef47609a2ae969ec96e9854e86
SHA512 3b95b2eadc6699fc76fe9889be275435a1f29a0c79a3cdfb4330befebb81db796378b2ec483c65669a4bc8e16f4be66189341eca3104188d72e4cf278369327b
SSDEEP 24576:A8sqz5a4GcKSWHQ6XyY6fk40y42y3dwC9PmgdmffA:A6z04QScQ6iYBwCsgdm
TLSH
T1C4F64B07BCE558B5C0AA92368A7651427A71BC490F3623DB3E50B37C3F72BD06AB6744
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5072 wrote to memory of 3760	5072	2026-08-10_e6c8cf1675bdd36a3b681bbc029c9567_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe	89

C:\Users\Admin\AppData\Local\Temp\2026-08-10_e6c8cf1675bdd36a3b681bbc029c9567_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_e6c8cf1675bdd36a3b681bbc029c9567_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5072
- C:\Users\Admin\AppData\Local\Temp\2026-08-10_e6c8cf1675bdd36a3b681bbc029c9567_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
  "C:\Users\Admin\AppData\Local\Temp\2026-08-10_e6c8cf1675bdd36a3b681bbc029c9567_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe" --elevated
  2⤵
  PID:3760

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact