General
- Target 2026-08-19_8fbcc960a82a75bca1b27d2bdc038683_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 86.6MB
- Sample260820-aenngayyb1
- SHA256 75dc30e34b19ace38fa29522424e6f15560f08ed790ed927f12431507675070b
- MD5 8fbcc960a82a75bca1b27d2bdc038683
- SHA1 422f394876d6e6aa1c67056867661e993ac61345
- SHA512 1786ff6ef13783ec9d0693d0b757c0dd502df350012924fea6acce3a84391de816f33c6da7c5a934b2dbbe6cc90a19762d71468e3d312a1b462acce033e33567
- SSDEEP 1572864:0pQWAY1WloRUA1+d+kNU7j+GSWenOi/gCh3XRYfe9DnJmpJNJzv8w9:0S6WVA1EDi7j+GBenj/gCl6u0Xzv8o
- TLSH T1C3183313BB6582A0C5A3DA3591B78644A634BC2E8338B3E72F64BA341F35BD12D75F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_8fbcc960a82a75bca1b27d2bdc038683_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_8fbcc960a82a75bca1b27d2bdc038683_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_8fbcc960a82a75bca1b27d2bdc038683_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 86.6MB
- SHA256 75dc30e34b19ace38fa29522424e6f15560f08ed790ed927f12431507675070b
- MD5 8fbcc960a82a75bca1b27d2bdc038683
- SHA1 422f394876d6e6aa1c67056867661e993ac61345
- SHA512 1786ff6ef13783ec9d0693d0b757c0dd502df350012924fea6acce3a84391de816f33c6da7c5a934b2dbbe6cc90a19762d71468e3d312a1b462acce033e33567
- SSDEEP 1572864:0pQWAY1WloRUA1+d+kNU7j+GSWenOi/gCh3XRYfe9DnJmpJNJzv8w9:0S6WVA1EDi7j+GBenj/gCl6u0Xzv8o
- TLSH T1C3183313BB6582A0C5A3DA3591B78644A634BC2E8338B3E72F64BA341F35BD12D75F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger