General
- Target 2026-08-20_4d0b711871bf101562305622ed29eed0_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 86.6MB
- Sample260821-dkty8afm9w
- SHA256 2c8e0fb0fa2f453399d293552496160a7c22caa3f5956d6310fd91caeeb04b41
- MD5 4d0b711871bf101562305622ed29eed0
- SHA1 ba0dcfb8a1ece3e868f6b03d5f0a28607f9ed8e8
- SHA512 595e9178112d2a39d0200d980b893d4051312676afcd8dd0fb6bdbff93bccb309ff54526270a1bd4dc1a0b0c60dfca32a25a50d01ad957c8c5598b20fa607616
- SSDEEP 1572864:IMl2lYQoIZ5yl4p1ZGP/J/vmXyQWQt8rbTiGbxUGrKCD2N7p0SlZmtqtwvpkUBu8:I/lgHl4QZGx8XTiG9U5B1ZmkmmZIcNE
- TLSH T12618330ABC9945EAC01953334DB616963BB6F8040F7227D32E90F2792EB79E45C7CB58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_4d0b711871bf101562305622ed29eed0_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_4d0b711871bf101562305622ed29eed0_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_4d0b711871bf101562305622ed29eed0_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 86.6MB
- SHA256 2c8e0fb0fa2f453399d293552496160a7c22caa3f5956d6310fd91caeeb04b41
- MD5 4d0b711871bf101562305622ed29eed0
- SHA1 ba0dcfb8a1ece3e868f6b03d5f0a28607f9ed8e8
- SHA512 595e9178112d2a39d0200d980b893d4051312676afcd8dd0fb6bdbff93bccb309ff54526270a1bd4dc1a0b0c60dfca32a25a50d01ad957c8c5598b20fa607616
- SSDEEP 1572864:IMl2lYQoIZ5yl4p1ZGP/J/vmXyQWQt8rbTiGbxUGrKCD2N7p0SlZmtqtwvpkUBu8:I/lgHl4QZGx8XTiG9U5B1ZmkmmZIcNE
- TLSH T12618330ABC9945EAC01953334DB616963BB6F8040F7227D32E90F2792EB79E45C7CB58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger