General
- Target 2026-08-18_13eff89cf1d56be86cb315a6c30a3f6e_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 87.1MB
- Sample260818-fwpvrawgpb
- SHA256 15757112355e5bde43ec94c1073801d09aed74370f2479f34c00e94dcdba482d
- MD5 13eff89cf1d56be86cb315a6c30a3f6e
- SHA1 cc10c5e5ddcf9fdf2e81322c29a38e93af99c6d0
- SHA512 f2f400db77dee49370d0d84c6e398054c8f53634e094c8fa328da8aaeaea816103ad85b34824670bed99f2b415270c7ea7105cfafb855907e2e83df8882a2a5b
- SSDEEP 1572864:SlhU8i3/ozAd+9AUMgG0L6sqmR7J3r9c0aOU0ANOl85KoaWslbbSvjc/NRVnlIbU:SlRi34HvMgG0L6sqsVBcQAsozslbgc/N
- TLSH T1EC183347BCA5817AC895963988B64691B674FC084F3633CB2E40FA793F35BC15E38B94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_13eff89cf1d56be86cb315a6c30a3f6e_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_13eff89cf1d56be86cb315a6c30a3f6e_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_13eff89cf1d56be86cb315a6c30a3f6e_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 87.1MB
- SHA256 15757112355e5bde43ec94c1073801d09aed74370f2479f34c00e94dcdba482d
- MD5 13eff89cf1d56be86cb315a6c30a3f6e
- SHA1 cc10c5e5ddcf9fdf2e81322c29a38e93af99c6d0
- SHA512 f2f400db77dee49370d0d84c6e398054c8f53634e094c8fa328da8aaeaea816103ad85b34824670bed99f2b415270c7ea7105cfafb855907e2e83df8882a2a5b
- SSDEEP 1572864:SlhU8i3/ozAd+9AUMgG0L6sqmR7J3r9c0aOU0ANOl85KoaWslbbSvjc/NRVnlIbU:SlRi34HvMgG0L6sqsVBcQAsozslbgc/N
- TLSH T1EC183347BCA5817AC895963988B64691B674FC084F3633CB2E40FA793F35BC15E38B94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger