General
- Target 2026-08-25_83aedfcffd3915840bdbc4d03d524730_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 83.7MB
- Sample260826-xvsnpassct
- SHA256 82c65fd61a1d5eb0c49dd04d04a93f7ed14bc999eddc43223e2244d22d2eb67c
- MD5 83aedfcffd3915840bdbc4d03d524730
- SHA1 0c35cea6411393920594a99af46f3fa9f1d3ce64
- SHA512 9c9612c34cf99c956eb18fd9824a450f03c6a26e4c55537f0e950892e6e08b88e24f4efca37c99c9a95c78bf9f391b4a7fdce1fabd1c335ebd168a7ce4749f05
- SSDEEP 1572864:xgF/O73BPu09QX8owiJPheg1FchWhLFto8J8qLpLhqzBOzCnnfs:xgF/ORu0RYk3wFtj8qmzBXs
- TLSH T1651833076CD980EAD156233289F765A1BB71B8180F7523CB2EA0727D2EBB7D48DB5314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_83aedfcffd3915840bdbc4d03d524730_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_83aedfcffd3915840bdbc4d03d524730_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_83aedfcffd3915840bdbc4d03d524730_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 83.7MB
- SHA256 82c65fd61a1d5eb0c49dd04d04a93f7ed14bc999eddc43223e2244d22d2eb67c
- MD5 83aedfcffd3915840bdbc4d03d524730
- SHA1 0c35cea6411393920594a99af46f3fa9f1d3ce64
- SHA512 9c9612c34cf99c956eb18fd9824a450f03c6a26e4c55537f0e950892e6e08b88e24f4efca37c99c9a95c78bf9f391b4a7fdce1fabd1c335ebd168a7ce4749f05
- SSDEEP 1572864:xgF/O73BPu09QX8owiJPheg1FchWhLFto8J8qLpLhqzBOzCnnfs:xgF/ORu0RYk3wFtj8qmzBXs
- TLSH T1651833076CD980EAD156233289F765A1BB71B8180F7523CB2EA0727D2EBB7D48DB5314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger