General
- Target 2026-08-23_bf66f2921b038891787e1107ce895b00_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 87.5MB
- Sample260825-154eqawyas
- SHA256 96d83f5f8df688b052ca50e4495d1d8a89c03a7a4683c1e8e1feb33c67654888
- MD5 bf66f2921b038891787e1107ce895b00
- SHA1 c4b9d90ee1cc66154bb0aee2d2e4677013d2eb79
- SHA512 1cb799a124bb0b16cf70df6a68b10b8cf0601f80b509ce4acea0ec1bc8068827ad3a3263661a4fbcdf514e7f6004cc33062015fa0b2e3ba0cd64dcb52cf84b60
- SSDEEP 1572864:KEfvbzbAHGyckjVmM1jnYFeJ5Tuu+GcVYYVF1qHtThPbnP8k9Db5r7F41:KavUH5ckpnYkJOGc6YVPstJPv9Ds1
- TLSH T13118330BAC649166D09A8F3AC17A4155E674B89CC73673EB3ED0A6B41E247C30EB7F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_bf66f2921b038891787e1107ce895b00_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_bf66f2921b038891787e1107ce895b00_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_bf66f2921b038891787e1107ce895b00_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 87.5MB
- SHA256 96d83f5f8df688b052ca50e4495d1d8a89c03a7a4683c1e8e1feb33c67654888
- MD5 bf66f2921b038891787e1107ce895b00
- SHA1 c4b9d90ee1cc66154bb0aee2d2e4677013d2eb79
- SHA512 1cb799a124bb0b16cf70df6a68b10b8cf0601f80b509ce4acea0ec1bc8068827ad3a3263661a4fbcdf514e7f6004cc33062015fa0b2e3ba0cd64dcb52cf84b60
- SSDEEP 1572864:KEfvbzbAHGyckjVmM1jnYFeJ5Tuu+GcVYYVF1qHtThPbnP8k9Db5r7F41:KavUH5ckpnYkJOGc6YVPstJPv9Ds1
- TLSH T13118330BAC649166D09A8F3AC17A4155E674B89CC73673EB3ED0A6B41E247C30EB7F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger