General
- Target 2026-09-04_2470e4a905c78d828978c988d2d20908_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 91.3MB
- Sample260905-tslwksvxhs
- SHA256 9912e80ddcb1880b2048c2a79c1e87dcc4511371b017a266d7e246aa04a19dd5
- MD5 2470e4a905c78d828978c988d2d20908
- SHA1 3bdbc98fbee41b9a86c54ae6dce94601ce5d2071
- SHA512 91e5272909ca2aa0a180a20107115659b81bc630c9a09ffa15fc429cf4862da083cdf4c7c364254dcd0a655022e32c7aaafde91a7d611bf3c482c087ebe3a40e
- SSDEEP 1572864:T1ikuru8HQ/gLMWDjrw8iFHlB7vzMxPY9OKXRmv6/W3mJLidJc6ZaXH9gQKbHUhq:Mu0Qv86lBfAA9BXoV3I6ZaXdI19
- TLSH T1C8283307AE9901F8C489AF34C4BB5727A624BC8CE73533A33E24BA746F653D16A74744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_2470e4a905c78d828978c988d2d20908_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_2470e4a905c78d828978c988d2d20908_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_2470e4a905c78d828978c988d2d20908_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 91.3MB
- SHA256 9912e80ddcb1880b2048c2a79c1e87dcc4511371b017a266d7e246aa04a19dd5
- MD5 2470e4a905c78d828978c988d2d20908
- SHA1 3bdbc98fbee41b9a86c54ae6dce94601ce5d2071
- SHA512 91e5272909ca2aa0a180a20107115659b81bc630c9a09ffa15fc429cf4862da083cdf4c7c364254dcd0a655022e32c7aaafde91a7d611bf3c482c087ebe3a40e
- SSDEEP 1572864:T1ikuru8HQ/gLMWDjrw8iFHlB7vzMxPY9OKXRmv6/W3mJLidJc6ZaXH9gQKbHUhq:Mu0Qv86lBfAA9BXoV3I6ZaXdI19
- TLSH T1C8283307AE9901F8C489AF34C4BB5727A624BC8CE73533A33E24BA746F653D16A74744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger