General
- Target 2026-09-04_41f11f0b6dea850cf2d453a76a3e5247_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 92.3MB
- Sample260905-p7ectscp3y
- SHA256 66337387f467a3726c1befb0cc859dc949e15710e38b40eed1c000bb431410bb
- MD5 41f11f0b6dea850cf2d453a76a3e5247
- SHA1 b9be06a0d3b0616be479086c9c3671d412adf0a4
- SHA512 e306081db20ac9f00cb7a46260f9f1e0093554caeaf7572d65a3f97e5f53259b2c7a7fb9061ec837d6e16d0cf12335ed521b868a0d680a091eb0d3ccfee749b3
- SSDEEP 1572864:T1iku7/vIxBOpxRAeyg7D9QKj0MtAsQIkPobzQq6I9Mq0QjnU9eQRmW+8:KAxBOjRAeyU9hjqIkPobzQq6IhU4QRmu
- TLSH T1B9283307AE5901F8C489AF38C4FB5327AA25BC88D33533A33E54BA746F657D16A78740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_41f11f0b6dea850cf2d453a76a3e5247_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_41f11f0b6dea850cf2d453a76a3e5247_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_41f11f0b6dea850cf2d453a76a3e5247_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 92.3MB
- SHA256 66337387f467a3726c1befb0cc859dc949e15710e38b40eed1c000bb431410bb
- MD5 41f11f0b6dea850cf2d453a76a3e5247
- SHA1 b9be06a0d3b0616be479086c9c3671d412adf0a4
- SHA512 e306081db20ac9f00cb7a46260f9f1e0093554caeaf7572d65a3f97e5f53259b2c7a7fb9061ec837d6e16d0cf12335ed521b868a0d680a091eb0d3ccfee749b3
- SSDEEP 1572864:T1iku7/vIxBOpxRAeyg7D9QKj0MtAsQIkPobzQq6I9Mq0QjnU9eQRmW+8:KAxBOjRAeyU9hjqIkPobzQq6IhU4QRmu
- TLSH T1B9283307AE5901F8C489AF38C4FB5327AA25BC88D33533A33E54BA746F657D16A78740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger