General
- Target 2026-08-20_e1f638bdeb3fb99151a38b6c3c0c0a1c_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 88.6MB
- Sample260820-fxfcpseq4w
- SHA256 c7c1f50326babe5e1fc5b6e1061e7482dc3061cba0b1e031f05ccaa06535529c
- MD5 e1f638bdeb3fb99151a38b6c3c0c0a1c
- SHA1 2cc71e12b86988f8f847a42df76b6fc09626e5d8
- SHA512 544df480f97f5b7b38161c28c16e5a87e857799850d0f7e0278f3eac41d63c14d99df652474e9632bbd6995418ce81cfcdeca55c6ec7c08725a8300103217746
- SSDEEP 1572864:ataRAI4Ld83f3XjzrT65osiDZa3GzGosps+zjm527OPLfIF0vjwfBnh3DnwL38mP:zuqH0ofZa3hp3zq5vf2JnRwD8mP
- TLSH T131183303AF9940B1C89ADF3599B616817570FC4E873433FB2EA1BA312F25BE559B4B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_e1f638bdeb3fb99151a38b6c3c0c0a1c_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_e1f638bdeb3fb99151a38b6c3c0c0a1c_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_e1f638bdeb3fb99151a38b6c3c0c0a1c_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 88.6MB
- SHA256 c7c1f50326babe5e1fc5b6e1061e7482dc3061cba0b1e031f05ccaa06535529c
- MD5 e1f638bdeb3fb99151a38b6c3c0c0a1c
- SHA1 2cc71e12b86988f8f847a42df76b6fc09626e5d8
- SHA512 544df480f97f5b7b38161c28c16e5a87e857799850d0f7e0278f3eac41d63c14d99df652474e9632bbd6995418ce81cfcdeca55c6ec7c08725a8300103217746
- SSDEEP 1572864:ataRAI4Ld83f3XjzrT65osiDZa3GzGosps+zjm527OPLfIF0vjwfBnh3DnwL38mP:zuqH0ofZa3hp3zq5vf2JnRwD8mP
- TLSH T131183303AF9940B1C89ADF3599B616817570FC4E873433FB2EA1BA312F25BE559B4B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger