General
- Target 2026-08-19_0b3829f9829928b38186fc98593027d8_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 87.6MB
- Sample260819-3crxbswapb
- SHA256 22d2fc3333fd5e76b71fc753c1958d6e7ef6a9efb278e6a862ad57e1d472a486
- MD5 0b3829f9829928b38186fc98593027d8
- SHA1 0ae657c5417b6eb99ec2939d96602d0706f092cb
- SHA512 5f01d786b2479f9d7544ee5bb7e1dbd06c1bd7d56c08d4b0ae0b8e386a26dd8356a3bdbf55ce35fab95c892bf7230b538222aa565689c2dd96e46a0747bec103
- SSDEEP 1572864:BfQ/UjD7M6IP2sfh1M3gHgUNVzNmjZ6yBFkzggZE8GHXwaOty+DKQZfZ:BpMPNtAUzYN6kezOT3wZ9
- TLSH T170183313BB5492E0C4A7DA3596FA4240A6357C5F8B3573E73E24BA341F267D02EB5B08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_0b3829f9829928b38186fc98593027d8_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_0b3829f9829928b38186fc98593027d8_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_0b3829f9829928b38186fc98593027d8_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 87.6MB
- SHA256 22d2fc3333fd5e76b71fc753c1958d6e7ef6a9efb278e6a862ad57e1d472a486
- MD5 0b3829f9829928b38186fc98593027d8
- SHA1 0ae657c5417b6eb99ec2939d96602d0706f092cb
- SHA512 5f01d786b2479f9d7544ee5bb7e1dbd06c1bd7d56c08d4b0ae0b8e386a26dd8356a3bdbf55ce35fab95c892bf7230b538222aa565689c2dd96e46a0747bec103
- SSDEEP 1572864:BfQ/UjD7M6IP2sfh1M3gHgUNVzNmjZ6yBFkzggZE8GHXwaOty+DKQZfZ:BpMPNtAUzYN6kezOT3wZ9
- TLSH T170183313BB5492E0C4A7DA3596FA4240A6357C5F8B3573E73E24BA341F267D02EB5B08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger