General
- Target 2026-09-04_45913de8cb7ecfbceb1864a17ad5a188_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 98.4MB
- Sample260905-pm6atacl3t
- SHA256 7cfb818af7809f9057003edd944a9265594460d2f4a3c62fb8a28e3bbb303bcc
- MD5 45913de8cb7ecfbceb1864a17ad5a188
- SHA1 8f93d9ef154118b27174aa786c9f4210b1eb152c
- SHA512 e88b706cbae16d748b3aa19226025679b0c893499cc4882009b413f5a9b6b64c879917504b6c788953e7b5049c53593ce2cc10d857c5593f6746b5ecc28179e7
- SSDEEP 1572864:wMnHSdKf6ci6R51/afbqoek2kXeNyR+5s5iFC6W1VQ56hypCsrM7a3+4OC5UxJx:1SdKPi2ZAJxX5+5shJ464p1v3+4t0x
- TLSH T17B382307254442E8E496D77CE0BF02B15976FC4CE7313AA72E8AB4B47EB6BC561B4B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_45913de8cb7ecfbceb1864a17ad5a188_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_45913de8cb7ecfbceb1864a17ad5a188_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.2
Botnet
-
8871af746e869f200c6d738cc0b3bb1d
C2
-
https://46.62.133.5
-
https://telegram.me/nag0e
-
https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=63727183
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0
Targets
-
- Target 2026-09-04_45913de8cb7ecfbceb1864a17ad5a188_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 98.4MB
- SHA256 7cfb818af7809f9057003edd944a9265594460d2f4a3c62fb8a28e3bbb303bcc
- MD5 45913de8cb7ecfbceb1864a17ad5a188
- SHA1 8f93d9ef154118b27174aa786c9f4210b1eb152c
- SHA512 e88b706cbae16d748b3aa19226025679b0c893499cc4882009b413f5a9b6b64c879917504b6c788953e7b5049c53593ce2cc10d857c5593f6746b5ecc28179e7
- SSDEEP 1572864:wMnHSdKf6ci6R51/afbqoek2kXeNyR+5s5iFC6W1VQ56hypCsrM7a3+4OC5UxJx:1SdKPi2ZAJxX5+5shJ464p1v3+4t0x
- TLSH T17B382307254442E8E496D77CE0BF02B15976FC4CE7313AA72E8AB4B47EB6BC561B4B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Windows executables referencing non-Windows User-Agents