General
- Target 2026-08-20_f397acd3d1cc8185ce7b2022753060c9_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 85.1MB
- Sample260821-cmermshb58
- SHA256 6c65c9fc2ed6894dfa55393218427492a83224e3ed133b63f70ae5c047d17320
- MD5 f397acd3d1cc8185ce7b2022753060c9
- SHA1 7b32c2babe3f40f281d7d810ef0539ff1116dbe9
- SHA512 e6db66c0b8950d0b09f34b7755504efe5e9d0c33ebf80413c55958be1634d77d6213ede6d54a463023559b290c8efba8c74c98590724685e3f1acd4f0e992c69
- SSDEEP 1572864:5U0Oe9Jk11QYOabysohWOqapgnKRERwVMdtqIFX5hV55fcw3MbAzhGHUuOZhnyv9:8erJgy94xmibRwSWI0w8bAz4sTnyV
- TLSH T154183327BD9481F5C09A9B35807392A27771F84D8B3633D76E55AA382EB23D25C78F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_f397acd3d1cc8185ce7b2022753060c9_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_f397acd3d1cc8185ce7b2022753060c9_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f397acd3d1cc8185ce7b2022753060c9_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 85.1MB
- SHA256 6c65c9fc2ed6894dfa55393218427492a83224e3ed133b63f70ae5c047d17320
- MD5 f397acd3d1cc8185ce7b2022753060c9
- SHA1 7b32c2babe3f40f281d7d810ef0539ff1116dbe9
- SHA512 e6db66c0b8950d0b09f34b7755504efe5e9d0c33ebf80413c55958be1634d77d6213ede6d54a463023559b290c8efba8c74c98590724685e3f1acd4f0e992c69
- SSDEEP 1572864:5U0Oe9Jk11QYOabysohWOqapgnKRERwVMdtqIFX5hV55fcw3MbAzhGHUuOZhnyv9:8erJgy94xmibRwSWI0w8bAz4sTnyV
- TLSH T154183327BD9481F5C09A9B35807392A27771F84D8B3633D76E55AA382EB23D25C78F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger