General
- Target 2026-08-25_8956ead6576c54fc0d190f4f627089bb_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 88.7MB
- Sample260826-w22phaeh32
- SHA256 3f26b995d39f67f91b84d8eceeccdbf2b01810caca7557936e5fdd1c735500ac
- MD5 8956ead6576c54fc0d190f4f627089bb
- SHA1 84c00bc91328eaca62ba7355bec65e4f2f6cee4d
- SHA512 6ad97080520f32c64675881dfb1706c5e48b8993bf5d18e94d1732b57937a5d8729f6ec2227dcc799ad3999ea35d9827675a32eae3b0447f7126f835964772db
- SSDEEP 1572864:juYH3SgPIFTx5cx6gWOYg0Zpo82+dPysyv6HJod0ey+BhWPyAi:R3SnFGx6gWOyUadKsyv8nIAi
- TLSH T19218331A6CE909FAD16653328DA351C23AB6BC480F7253D32E40727D2FB67E99C78750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_8956ead6576c54fc0d190f4f627089bb_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_8956ead6576c54fc0d190f4f627089bb_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_8956ead6576c54fc0d190f4f627089bb_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 88.7MB
- SHA256 3f26b995d39f67f91b84d8eceeccdbf2b01810caca7557936e5fdd1c735500ac
- MD5 8956ead6576c54fc0d190f4f627089bb
- SHA1 84c00bc91328eaca62ba7355bec65e4f2f6cee4d
- SHA512 6ad97080520f32c64675881dfb1706c5e48b8993bf5d18e94d1732b57937a5d8729f6ec2227dcc799ad3999ea35d9827675a32eae3b0447f7126f835964772db
- SSDEEP 1572864:juYH3SgPIFTx5cx6gWOYg0Zpo82+dPysyv6HJod0ey+BhWPyAi:R3SnFGx6gWOyUadKsyv8nIAi
- TLSH T19218331A6CE909FAD16653328DA351C23AB6BC480F7253D32E40727D2FB67E99C78750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger