Analysis
- max time kernel
150s - max time network
139s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
01/09/2026, 22:38
General
- Target 2026-08-31_fed58f1dc051c186aa2bc1062db09fb7_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
- Size 92.9MB
- Sample260901-2kk83sydnf
- SHA256 0a83f7fa5162cb969c11fd5bf6257c544ac8c6d70d560c32173e773bbbd660c6
Malware Config
Signatures
- Detects Windows executables referencing non-Windows User-Agents 20 IoCs
- Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-31_fed58f1dc051c186aa2bc1062db09fb7_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-31_fed58f1dc051c186aa2bc1062db09fb7_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3904-1-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-0-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-2-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-3-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-4-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-5-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-6-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-7-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-8-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-9-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-10-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-11-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-12-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-13-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-14-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-15-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-16-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-17-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-18-0x0000000750000000-0x0000000750295000-memory.dmp
memory/3904-21-0x0000000750000000-0x0000000750295000-memory.dmp