General
- Target 2026-08-16_e728d31bb517c6fb3728d0baa4371e44_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 89.1MB
- Sample260817-apr4mszyew
- SHA256 584159f154ccb4564171e83a92a54f877222fd7259619d3ac813ad62affe422e
- MD5 e728d31bb517c6fb3728d0baa4371e44
- SHA1 468a6b7c74083c4c78092f2e930537f72e6cc172
- SHA512 6e3ef47f1f4419d1a249ed2e67a8eaa71842e7346f91f2bcf8bae3a9bcf07819e277a55125ab221d6de55c21e521f0439b22ed45c79f525ebd8742f2020524ae
- SSDEEP 1572864:ZrFY9yFY7wHVTDxTSuXS1YIgRbcKr9n0YRfcX9FCUu043YfgCLccM8a/sM0WfnMs:VeoS7wHtDxT9S18ion7R6DCUu/36LccW
- TLSH T1BE28330BBCA544B9C8A9973948A345A1B2B4FC158F3A77C72E40F6B83F357E00939765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_e728d31bb517c6fb3728d0baa4371e44_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_e728d31bb517c6fb3728d0baa4371e44_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_e728d31bb517c6fb3728d0baa4371e44_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 89.1MB
- SHA256 584159f154ccb4564171e83a92a54f877222fd7259619d3ac813ad62affe422e
- MD5 e728d31bb517c6fb3728d0baa4371e44
- SHA1 468a6b7c74083c4c78092f2e930537f72e6cc172
- SHA512 6e3ef47f1f4419d1a249ed2e67a8eaa71842e7346f91f2bcf8bae3a9bcf07819e277a55125ab221d6de55c21e521f0439b22ed45c79f525ebd8742f2020524ae
- SSDEEP 1572864:ZrFY9yFY7wHVTDxTSuXS1YIgRbcKr9n0YRfcX9FCUu043YfgCLccM8a/sM0WfnMs:VeoS7wHtDxT9S18ion7R6DCUu/36LccW
- TLSH T1BE28330BBCA544B9C8A9973948A345A1B2B4FC158F3A77C72E40F6B83F357E00939765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger