General
- Target 2026-09-04_05ff5844e2105ba8b94b93d35141b8ea_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 97.1MB
- Sample260905-x6sg3aff26
- SHA256 17a02bb9eacbde8ecff840ae6495e1999d68b5a3c25b5d82658348fc40a2ae59
- MD5 05ff5844e2105ba8b94b93d35141b8ea
- SHA1 e6cc9c794d97d332276adb38bd2335bd3d5ccea0
- SHA512 6b00fa1c968c2cb1a9dd4a72d839d04a4c284c6b0c4b8e85bb7730b6a448f1696a65cdc22d2a2d488da97bad33842c34db8db3012401c1930a4070806991b8eb
- SSDEEP 1572864:/BkPTk6Stu27E2XLIX2a7tlpZWvrGaBMDh9dcxkt2wiyZF:ZkPY6SA2g2bza7tlaiqIh9dttdim
- TLSH T165282343B79852E4C8C5DA34D56F02276728788DCB3132B36E266EB67F35BD056B9380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_05ff5844e2105ba8b94b93d35141b8ea_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_05ff5844e2105ba8b94b93d35141b8ea_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.2
Botnet
-
8871af746e869f200c6d738cc0b3bb1d
C2
-
https://46.62.133.5
-
https://telegram.me/nag0e
-
https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=63727183
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0
Targets
-
- Target 2026-09-04_05ff5844e2105ba8b94b93d35141b8ea_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver
- Size 97.1MB
- SHA256 17a02bb9eacbde8ecff840ae6495e1999d68b5a3c25b5d82658348fc40a2ae59
- MD5 05ff5844e2105ba8b94b93d35141b8ea
- SHA1 e6cc9c794d97d332276adb38bd2335bd3d5ccea0
- SHA512 6b00fa1c968c2cb1a9dd4a72d839d04a4c284c6b0c4b8e85bb7730b6a448f1696a65cdc22d2a2d488da97bad33842c34db8db3012401c1930a4070806991b8eb
- SSDEEP 1572864:/BkPTk6Stu27E2XLIX2a7tlpZWvrGaBMDh9dcxkt2wiyZF:ZkPY6SA2g2bza7tlaiqIh9dttdim
- TLSH T165282343B79852E4C8C5DA34D56F02276728788DCB3132B36E266EB67F35BD056B9380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Windows executables referencing non-Windows User-Agents