General
- Target 2026-09-04_ab900efc40b8b53aaa5a66db2dfcf1a8_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 13.4MB
- Sample260905-a2tg8scl41
- SHA256 9cc59a6e37685c6b866e2dc8e2b21569a218915e2ea224e6f43207928838521e
- MD5 ab900efc40b8b53aaa5a66db2dfcf1a8
- SHA1 8df86b2dd31cae047c3b61bd505b5393a3cb2ab7
- SHA512 8243c6bff41a3337f626b86b0b083ed29353bfe649e420698cf1aee7c580cd6f870887691c85f793e7868832c3f863fca3e5e40f11f90863e29ff97d68e2afae
- SSDEEP 49152:Xnf+Un0xsT2ylBIaPEbG8+Bo1XNcqO12L6ke1oR10X3ha2YDrAoqb5JVpHiUUvZT:3gsDhp+OsLH2TYfqbVpHiUURuO
- TLSH T1DFE65B07260442E8E892D778F17F06B16A76FC4CE33136A71E9AB4B47EB67C164B5B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_ab900efc40b8b53aaa5a66db2dfcf1a8_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_ab900efc40b8b53aaa5a66db2dfcf1a8_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.2
Botnet
-
35c57ee19bab0b52138205d458e76f69
C2
-
https://telegram.me/nag0e
-
https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=63727183
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0
Targets
-
- Target 2026-09-04_ab900efc40b8b53aaa5a66db2dfcf1a8_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 13.4MB
- SHA256 9cc59a6e37685c6b866e2dc8e2b21569a218915e2ea224e6f43207928838521e
- MD5 ab900efc40b8b53aaa5a66db2dfcf1a8
- SHA1 8df86b2dd31cae047c3b61bd505b5393a3cb2ab7
- SHA512 8243c6bff41a3337f626b86b0b083ed29353bfe649e420698cf1aee7c580cd6f870887691c85f793e7868832c3f863fca3e5e40f11f90863e29ff97d68e2afae
- SSDEEP 49152:Xnf+Un0xsT2ylBIaPEbG8+Bo1XNcqO12L6ke1oR10X3ha2YDrAoqb5JVpHiUUvZT:3gsDhp+OsLH2TYfqbVpHiUURuO
- TLSH T1DFE65B07260442E8E892D778F17F06B16A76FC4CE33136A71E9AB4B47EB67C164B5B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Windows executables referencing non-Windows User-Agents