General
- Target 2026-08-16_355e07f444915258dbb5dfeb09a38e34_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 93.2MB
- Sample260816-3pj29age63
- SHA256 e424c2d21c657616dd53ab5895f1abbf7d32d5fc0ee34def41438bc9196534fb
- MD5 355e07f444915258dbb5dfeb09a38e34
- SHA1 5437276831d798f2ea1be23ffb03d974e8259145
- SHA512 b5e8d9cec6ef727bf0d23b9607d98e12d26f0b61836bc167aea7ba49ef9d75a0983e899780b1292082ed30a4f299e24382c91f8802f0ddf5e0e0e781f812cb8e
- SSDEEP 1572864:ohbgFbVcNTI2ybr1PbngReyHlfhsfoBxfiqIOOx5QNRVeHKrtUcrGn:ScbdbpD9yFfhsAqZOQQ9rUcrGn
- TLSH T12928335BBC8548B8D4AB523A48B21A6226B4BC644F3633DB3E10F5783F357C09D39B65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_355e07f444915258dbb5dfeb09a38e34_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_355e07f444915258dbb5dfeb09a38e34_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_355e07f444915258dbb5dfeb09a38e34_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 93.2MB
- SHA256 e424c2d21c657616dd53ab5895f1abbf7d32d5fc0ee34def41438bc9196534fb
- MD5 355e07f444915258dbb5dfeb09a38e34
- SHA1 5437276831d798f2ea1be23ffb03d974e8259145
- SHA512 b5e8d9cec6ef727bf0d23b9607d98e12d26f0b61836bc167aea7ba49ef9d75a0983e899780b1292082ed30a4f299e24382c91f8802f0ddf5e0e0e781f812cb8e
- SSDEEP 1572864:ohbgFbVcNTI2ybr1PbngReyHlfhsfoBxfiqIOOx5QNRVeHKrtUcrGn:ScbdbpD9yFfhsAqZOQQ9rUcrGn
- TLSH T12928335BBC8548B8D4AB523A48B21A6226B4BC644F3633DB3E10F5783F357C09D39B65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger