General
- Target 2026-08-12_7ff7a5fc37d5ec7cf6d9a302fef16935_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 5.4MB
- Sample260812-16282sfb34
- SHA256 a6c2a5383814d42e4e8fe5194093a903b26720a9f1cbbdc7858702f3c913750a
- MD5 7ff7a5fc37d5ec7cf6d9a302fef16935
- SHA1 910b0f472542cf41cc025fd40ea2382f57ee2328
- SHA512 a0da8092c2e2af3abfd99259058f509fcd815815e0fbde680ab6fcfc74ef77100b42cfee06265f305a8dad0cc733377298d7caa8f13b722ba189852e1765d9ba
- SSDEEP 49152:ACZyDRI2F4RsiH4lJrbG8YnjuolaiwL3PHuIwsNHRkF8PWJJ/D:AhV4OQkr/eiPk
- TLSH T180467D17BE9549F9C09AE73588B7121A7A30BC4D8B3133D32E60AEB82E317D16E75744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_7ff7a5fc37d5ec7cf6d9a302fef16935_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_7ff7a5fc37d5ec7cf6d9a302fef16935_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
2.9
Botnet
-
6b32989820461c8ba2bd87be20243059
C2
-
https://telegram.me/j0tt0s
-
https://steamcommunity.com/profiles/76561198660175584
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/144.0.0.0
Targets
-
- Target 2026-08-12_7ff7a5fc37d5ec7cf6d9a302fef16935_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 5.4MB
- SHA256 a6c2a5383814d42e4e8fe5194093a903b26720a9f1cbbdc7858702f3c913750a
- MD5 7ff7a5fc37d5ec7cf6d9a302fef16935
- SHA1 910b0f472542cf41cc025fd40ea2382f57ee2328
- SHA512 a0da8092c2e2af3abfd99259058f509fcd815815e0fbde680ab6fcfc74ef77100b42cfee06265f305a8dad0cc733377298d7caa8f13b722ba189852e1765d9ba
- SSDEEP 49152:ACZyDRI2F4RsiH4lJrbG8YnjuolaiwL3PHuIwsNHRkF8PWJJ/D:AhV4OQkr/eiPk
- TLSH T180467D17BE9549F9C09AE73588B7121A7A30BC4D8B3133D32E60AEB82E317D16E75744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtSetInformationThreadHideFromDebugger