General
- Target 2026-08-17_da361e34dbc837be8269a3a599edbfcf_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 89.2MB
- Sample260817-ghey3atfph
- SHA256 a1ad790a4d838a7596c98efc7dc43a7166d140aec928480fd28dda84640b3ec8
- MD5 da361e34dbc837be8269a3a599edbfcf
- SHA1 17ac911f6e6c8a1430414e614adcd996e5c8c65a
- SHA512 9a72c54846b9b41672c51dc67c8c138d8d1ccf8839984aa61a8719230657a1b83646b57c733e6735b95f882440073d05338df0d99be28bfcc7b16408d7369631
- SSDEEP 1572864:bgHn9uz8zoGb+qkR0wYSg1Zb91MHoobsaLkX8M509eeIJfHoW:Un95oGb+f0bxXgoEJ0XyeNGW
- TLSH T1E5283387ACA44079C89A533D88A616427675FC454F3A33CB3E40E7B82F35BD19E39B94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_da361e34dbc837be8269a3a599edbfcf_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_da361e34dbc837be8269a3a599edbfcf_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_da361e34dbc837be8269a3a599edbfcf_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 89.2MB
- SHA256 a1ad790a4d838a7596c98efc7dc43a7166d140aec928480fd28dda84640b3ec8
- MD5 da361e34dbc837be8269a3a599edbfcf
- SHA1 17ac911f6e6c8a1430414e614adcd996e5c8c65a
- SHA512 9a72c54846b9b41672c51dc67c8c138d8d1ccf8839984aa61a8719230657a1b83646b57c733e6735b95f882440073d05338df0d99be28bfcc7b16408d7369631
- SSDEEP 1572864:bgHn9uz8zoGb+qkR0wYSg1Zb91MHoobsaLkX8M509eeIJfHoW:Un95oGb+f0bxXgoEJ0XyeNGW
- TLSH T1E5283387ACA44079C89A533D88A616427675FC454F3A33CB3E40E7B82F35BD19E39B94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger