General
- Target 2026-08-23_d0345796e7beab5153e7e01831c39b12_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 87.5MB
- Sample260825-1qhjpsep6v
- SHA256 09725829cfaf5468dda8ab8e33c3bd9ec1ebba17e095f38c42afee484ab23135
- MD5 d0345796e7beab5153e7e01831c39b12
- SHA1 c709eef55c8440d6abf22f3a0a7ea58b43b50c49
- SHA512 d4b7f1fba0e69d8ba0b648f0e66beb35514afc5f8c38b8305b43685b2f7079d36a0540a8f84e1e60e1ad57778e9acc5156b7d1d2149e3340d057bc66c2a68cfe
- SSDEEP 1572864:WTwycnUFN/HafYiFoi931c01m5HcxhXorBZK8OyRQtfeIvTgQxeKGbMJOnj710C8:UYwPKXF8CmqzYr/TQtWIbgQzGy8j710B
- TLSH T10A18330AAD5041A9D4AA8F3AC1379041E534B89CD33963EB3EC4E6742E657C31EB7F46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_d0345796e7beab5153e7e01831c39b12_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_d0345796e7beab5153e7e01831c39b12_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_d0345796e7beab5153e7e01831c39b12_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 87.5MB
- SHA256 09725829cfaf5468dda8ab8e33c3bd9ec1ebba17e095f38c42afee484ab23135
- MD5 d0345796e7beab5153e7e01831c39b12
- SHA1 c709eef55c8440d6abf22f3a0a7ea58b43b50c49
- SHA512 d4b7f1fba0e69d8ba0b648f0e66beb35514afc5f8c38b8305b43685b2f7079d36a0540a8f84e1e60e1ad57778e9acc5156b7d1d2149e3340d057bc66c2a68cfe
- SSDEEP 1572864:WTwycnUFN/HafYiFoi931c01m5HcxhXorBZK8OyRQtfeIvTgQxeKGbMJOnj710C8:UYwPKXF8CmqzYr/TQtWIbgQzGy8j710B
- TLSH T10A18330AAD5041A9D4AA8F3AC1379041E534B89CD33963EB3EC4E6742E657C31EB7F46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger