General
- Target 2026-08-15_b93d4468f15755606e5d02439f86321a_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.2MB
- Sample260815-bkdk5adb33
- SHA256 ffdf913a3872dcdea67b1406e700cd0d0a1070623c2ecf2dab60e75cba95eb8d
- MD5 b93d4468f15755606e5d02439f86321a
- SHA1 99e76bf6c5c987eefc8ea0bea55be05cc51c12aa
- SHA512 219cfc2ba654e708b3a24ecde11c70d7b7dc91e6ae053405669ee17d0c0577b30735d18eb26705122775cea5198e752c258560e7669ac5f6d7da8d6ee7d48e43
- SSDEEP 49152:hDq/udUXy2pFTRCleG2NKll8QmJT1HJLl/tvj2vq4FoEJ3Gfy:hY9TYln1QT1HJJVvj2vq4FoEJ35
- TLSH T1E1F5AE07AD9241E6C4AEA732897752557B35BC4C8B3533D72EA0B2382FB23D44D7AB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_b93d4468f15755606e5d02439f86321a_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_b93d4468f15755606e5d02439f86321a_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
2.9
Botnet
-
5fdb6df778631818165110294c620890
C2
-
https://65.109.35.163
-
https://telegram.me/j0tt0s
-
https://steamcommunity.com/profiles/76561198660175584
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/144.0.0.0
Targets
-
- Target 2026-08-15_b93d4468f15755606e5d02439f86321a_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.2MB
- SHA256 ffdf913a3872dcdea67b1406e700cd0d0a1070623c2ecf2dab60e75cba95eb8d
- MD5 b93d4468f15755606e5d02439f86321a
- SHA1 99e76bf6c5c987eefc8ea0bea55be05cc51c12aa
- SHA512 219cfc2ba654e708b3a24ecde11c70d7b7dc91e6ae053405669ee17d0c0577b30735d18eb26705122775cea5198e752c258560e7669ac5f6d7da8d6ee7d48e43
- SSDEEP 49152:hDq/udUXy2pFTRCleG2NKll8QmJT1HJLl/tvj2vq4FoEJ3Gfy:hY9TYln1QT1HJJVvj2vq4FoEJ35
- TLSH T1E1F5AE07AD9241E6C4AEA732897752557B35BC4C8B3533D72EA0B2382FB23D44D7AB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtSetInformationThreadHideFromDebugger