General
- Target 2026-08-14_94e7b9eee8a39a971ea8cdf1163cbe5c_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 3.3MB
- Sample260814-3cea8stend
- SHA256 78e7550b9ee432d2b63142843901bfc5290e0b29771356d1ddd7c8263c3c7025
- MD5 94e7b9eee8a39a971ea8cdf1163cbe5c
- SHA1 cc2f4848515ca5952996bcaf66bfc5007126f494
- SHA512 5be38cca0df05606e639b76784d9727fe499807c6ecb95ef8c250db3216dd3e528fc0fed16b75f1a9924ab0b4ec110a9d80f5221460bd1f7349bd132526dd397
- SSDEEP 49152:ombn/bwQwJ1YfpfVHRwX/tdm5lO/6rDL90n4v02G:bHttwX/7m5o+DL904a
- TLSH T1EFF59E0B7E905269D586DB39D8F20652B624FC0CA73677D32FA1AA74AF20BC15DB1F04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_94e7b9eee8a39a971ea8cdf1163cbe5c_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_94e7b9eee8a39a971ea8cdf1163cbe5c_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
2.9
Botnet
-
5fdb6df778631818165110294c620890
C2
-
https://65.109.35.163
-
https://telegram.me/j0tt0s
-
https://steamcommunity.com/profiles/76561198660175584
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/144.0.0.0
Targets
-
- Target 2026-08-14_94e7b9eee8a39a971ea8cdf1163cbe5c_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 3.3MB
- SHA256 78e7550b9ee432d2b63142843901bfc5290e0b29771356d1ddd7c8263c3c7025
- MD5 94e7b9eee8a39a971ea8cdf1163cbe5c
- SHA1 cc2f4848515ca5952996bcaf66bfc5007126f494
- SHA512 5be38cca0df05606e639b76784d9727fe499807c6ecb95ef8c250db3216dd3e528fc0fed16b75f1a9924ab0b4ec110a9d80f5221460bd1f7349bd132526dd397
- SSDEEP 49152:ombn/bwQwJ1YfpfVHRwX/tdm5lO/6rDL90n4v02G:bHttwX/7m5o+DL904a
- TLSH T1EFF59E0B7E905269D586DB39D8F20652B624FC0CA73677D32FA1AA74AF20BC15DB1F04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtSetInformationThreadHideFromDebugger