General
- Target 2026-08-20_35596354d6eeba0b905be2150adf1f88_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 80.2MB
- Sample260821-ayb4sagg62
- SHA256 4bf49cceb99e0e049c8974c9718ed520869e2e4c9286602f7cc1c2e2e83a2569
- MD5 35596354d6eeba0b905be2150adf1f88
- SHA1 14009e004cfa41e547a4f5683236f88a711a9f08
- SHA512 c7de8ab04e65947fa0a38d6c7dcfdfcbeac8381bb96fc5419a95a0ed6a50c9c1ef2fa5236869f1f30ce69ee1522b11baafa998b5b7263e1fcdaa1a1963ac2443
- SSDEEP 1572864:hwPGs767q0Qum6baNwvm+ZIhylHXI3qajov6hiUw4qiH/ow:GPGse7q0QuBwwihylY6ciykza
- TLSH T15E0833137D9481B6C0AADB328573A2927675B80D8B3233E32E517D382FB17D16D78B19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_35596354d6eeba0b905be2150adf1f88_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_35596354d6eeba0b905be2150adf1f88_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_35596354d6eeba0b905be2150adf1f88_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 80.2MB
- SHA256 4bf49cceb99e0e049c8974c9718ed520869e2e4c9286602f7cc1c2e2e83a2569
- MD5 35596354d6eeba0b905be2150adf1f88
- SHA1 14009e004cfa41e547a4f5683236f88a711a9f08
- SHA512 c7de8ab04e65947fa0a38d6c7dcfdfcbeac8381bb96fc5419a95a0ed6a50c9c1ef2fa5236869f1f30ce69ee1522b11baafa998b5b7263e1fcdaa1a1963ac2443
- SSDEEP 1572864:hwPGs767q0Qum6baNwvm+ZIhylHXI3qajov6hiUw4qiH/ow:GPGse7q0QuBwwihylY6ciykza
- TLSH T15E0833137D9481B6C0AADB328573A2927675B80D8B3233E32E517D382FB17D16D78B19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger