General
- Target 2026-08-15_ddb36c5d2356f0525f3db98ba22c92d5_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.8MB
- Sample260815-mj7clatgrb
- SHA256 a17cab4b2a70969d2df4c80eea4a8f81e5b2dbd6e60fb57ca3e2e7cc7d3642b0
- MD5 ddb36c5d2356f0525f3db98ba22c92d5
- SHA1 e66d15a07469509a0324fa7ac9fb7bdad408dbdf
- SHA512 20cf9cc1324a022fd080a6b21c1b2211fccefb0830c93037e6e14c417f32364fe55b2d542687cfbacc0f0f13f13ab6c0c66fe2e9e927e5a6290a8c82afe55323
- SSDEEP 98304:HlZ5/GB/skP/vl0TYqled4/pRM8Or/R95uy3:HsBV/Nuled4BnOjR/h3
- TLSH T11036D01BBCD148B6C0AEE231896691567A71BC490F3127D73F90B3382FB6BD09A79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_ddb36c5d2356f0525f3db98ba22c92d5_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_ddb36c5d2356f0525f3db98ba22c92d5_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_ddb36c5d2356f0525f3db98ba22c92d5_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.8MB
- SHA256 a17cab4b2a70969d2df4c80eea4a8f81e5b2dbd6e60fb57ca3e2e7cc7d3642b0
- MD5 ddb36c5d2356f0525f3db98ba22c92d5
- SHA1 e66d15a07469509a0324fa7ac9fb7bdad408dbdf
- SHA512 20cf9cc1324a022fd080a6b21c1b2211fccefb0830c93037e6e14c417f32364fe55b2d542687cfbacc0f0f13f13ab6c0c66fe2e9e927e5a6290a8c82afe55323
- SSDEEP 98304:HlZ5/GB/skP/vl0TYqled4/pRM8Or/R95uy3:HsBV/Nuled4BnOjR/h3
- TLSH T11036D01BBCD148B6C0AEE231896691567A71BC490F3127D73F90B3382FB6BD09A79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
Loads dropped DLL