General
- Target 2026-09-03_9eeb237d312237e8c854dee063d699fc_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 90.6MB
- Sample260905-2evwbsaq7v
- SHA256 6b6171ac841b522ea3933d8c6965c737c1ade64270b56b97c1c6e27e9a7772c5
- MD5 9eeb237d312237e8c854dee063d699fc
- SHA1 19dfd7dc2d92b522b2df5358a4bfb3c4aee4c77b
- SHA512 efb374c281428206cbb5f1e74109c5435dada39c9eab05f2e9e325ce896bf5930850500786b0474479f46f756ec5b8ad657646899ce01a28f9bf6ec9d0e52b60
- SSDEEP 1572864:GniMnsUX/eZrMAM4phc402LHvcXlKdP50cJWnenj5zpGtZwJBixpomIKDLM8LxZL:GnF12ZrMB4pdPfn0cJWne9lGmLiPPDpP
- TLSH T136282303655452A8C889EB38C17B427AABB4F8CDE33672875DD275BC2F687E1AC35740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_9eeb237d312237e8c854dee063d699fc_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_9eeb237d312237e8c854dee063d699fc_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.2
Botnet
-
8871af746e869f200c6d738cc0b3bb1d
C2
-
https://46.62.133.5
-
https://telegram.me/nag0e
-
https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=63727183
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0
Targets
-
- Target 2026-09-03_9eeb237d312237e8c854dee063d699fc_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 90.6MB
- SHA256 6b6171ac841b522ea3933d8c6965c737c1ade64270b56b97c1c6e27e9a7772c5
- MD5 9eeb237d312237e8c854dee063d699fc
- SHA1 19dfd7dc2d92b522b2df5358a4bfb3c4aee4c77b
- SHA512 efb374c281428206cbb5f1e74109c5435dada39c9eab05f2e9e325ce896bf5930850500786b0474479f46f756ec5b8ad657646899ce01a28f9bf6ec9d0e52b60
- SSDEEP 1572864:GniMnsUX/eZrMAM4phc402LHvcXlKdP50cJWnenj5zpGtZwJBixpomIKDLM8LxZL:GnF12ZrMB4pdPfn0cJWne9lGmLiPPDpP
- TLSH T136282303655452A8C889EB38C17B427AABB4F8CDE33672875DD275BC2F687E1AC35740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Windows executables referencing non-Windows User-Agents