General
- Target 2026-08-20_ebab243cb4307907ad187fadeaf532f2_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 83.1MB
- Sample260820-vctf6aee77
- SHA256 a9c03e39f83d65ddc7aa8ca492bab44f75341469633cc83989ab11a58d742bfd
- MD5 ebab243cb4307907ad187fadeaf532f2
- SHA1 b292fb39743d45404f899984e79f1e36f8d0fb6e
- SHA512 e2cd0bf33bde99f6169afb42774a4e29dcd83850f4c08dd1fe56d451d5b4ed9dae356bb4f6c08b570d7fd854e461a5fc85dc3922a2781d385c000de7f8e79dde
- SSDEEP 1572864:jvxKXueNenkz4jaZaTXqKTtda69qPqIN30FDD4BhqNPTKtsDHsmGIv8Ifapm:4ueL4jjTXPJda6IPqDFaqNP2D+8Sapm
- TLSH T1C7183303B88406E9C856CA75D6BF6263E624BC8CCB3572F32D5166746F79FC06AB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_ebab243cb4307907ad187fadeaf532f2_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_ebab243cb4307907ad187fadeaf532f2_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ebab243cb4307907ad187fadeaf532f2_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 83.1MB
- SHA256 a9c03e39f83d65ddc7aa8ca492bab44f75341469633cc83989ab11a58d742bfd
- MD5 ebab243cb4307907ad187fadeaf532f2
- SHA1 b292fb39743d45404f899984e79f1e36f8d0fb6e
- SHA512 e2cd0bf33bde99f6169afb42774a4e29dcd83850f4c08dd1fe56d451d5b4ed9dae356bb4f6c08b570d7fd854e461a5fc85dc3922a2781d385c000de7f8e79dde
- SSDEEP 1572864:jvxKXueNenkz4jaZaTXqKTtda69qPqIN30FDD4BhqNPTKtsDHsmGIv8Ifapm:4ueL4jjTXPJda6IPqDFaqNP2D+8Sapm
- TLSH T1C7183303B88406E9C856CA75D6BF6263E624BC8CCB3572F32D5166746F79FC06AB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger