General
- Target 2026-08-20_42827d49f61840a633db9ad71c192777_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 86.7MB
- Sample260821-dmacla1gra
- SHA256 c9082f765b9d6580d20d56814b1edca52502b754e3553fae7387584f3c32d37c
- MD5 42827d49f61840a633db9ad71c192777
- SHA1 96b9e881075c3b9edbd91d1ea75f0e60b7bddbc1
- SHA512 e62b9ef58aa09d8460ca67a95f03797ffec113b1b27e70cfd52bab3a6ae252052cc1cfb431dfc9822607589ade6cb79fe1bc17aad9f0af9649e0280bf278232e
- SSDEEP 1572864:lg8X4oAF9fcn4e0mqxm4cHYner2LVgYSFtwQBkaDRhq/DASQasRVtjdtTe7jIlGY:lT1sBMom4caer2WFKQB3kkSQx/tJtTeo
- TLSH T1C51833167CD549EAC465533288B66691BBBAF8080FB123DB3A91B27C2FB73D45D38344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_42827d49f61840a633db9ad71c192777_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_42827d49f61840a633db9ad71c192777_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_42827d49f61840a633db9ad71c192777_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 86.7MB
- SHA256 c9082f765b9d6580d20d56814b1edca52502b754e3553fae7387584f3c32d37c
- MD5 42827d49f61840a633db9ad71c192777
- SHA1 96b9e881075c3b9edbd91d1ea75f0e60b7bddbc1
- SHA512 e62b9ef58aa09d8460ca67a95f03797ffec113b1b27e70cfd52bab3a6ae252052cc1cfb431dfc9822607589ade6cb79fe1bc17aad9f0af9649e0280bf278232e
- SSDEEP 1572864:lg8X4oAF9fcn4e0mqxm4cHYner2LVgYSFtwQBkaDRhq/DASQasRVtjdtTe7jIlGY:lT1sBMom4caer2WFKQB3kkSQx/tJtTeo
- TLSH T1C51833167CD549EAC465533288B66691BBBAF8080FB123DB3A91B27C2FB73D45D38344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger