General
- Target 2026-08-20_8b05335c093e291455b900c7f85629d6_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 84.6MB
- Sample260820-bhafpacp8w
- SHA256 5f99e698f639f8e3b67862c3d6f5712dcc8471a7da757e8cec435e8d1acaaba9
- MD5 8b05335c093e291455b900c7f85629d6
- SHA1 a07e2e2e19b733c6608b5a66580953858ae68a03
- SHA512 fe76427d1c1d2fd313046c81a09257e87704a1f85cbb336f850eb07706c6a951e6c7833420424d634932f00a123573259460a1035660f9898462ec6dc5e42717
- SSDEEP 1572864:hfU741U1LCq9g9yWV98nAEJecWbysDWxrcRS5IMgrsw:hM7EgLJgPbSKYomIbb
- TLSH T110183313BB5591A1C497DA3996F74781AA357C5F873573E72E24B9381F223E02EB0B08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_8b05335c093e291455b900c7f85629d6_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_8b05335c093e291455b900c7f85629d6_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_8b05335c093e291455b900c7f85629d6_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 84.6MB
- SHA256 5f99e698f639f8e3b67862c3d6f5712dcc8471a7da757e8cec435e8d1acaaba9
- MD5 8b05335c093e291455b900c7f85629d6
- SHA1 a07e2e2e19b733c6608b5a66580953858ae68a03
- SHA512 fe76427d1c1d2fd313046c81a09257e87704a1f85cbb336f850eb07706c6a951e6c7833420424d634932f00a123573259460a1035660f9898462ec6dc5e42717
- SSDEEP 1572864:hfU741U1LCq9g9yWV98nAEJecWbysDWxrcRS5IMgrsw:hM7EgLJgPbSKYomIbb
- TLSH T110183313BB5591A1C497DA3996F74781AA357C5F873573E72E24B9381F223E02EB0B08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger