Analysis
- max time kernel
150s - max time network
78s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/09/2026, 23:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
- Size 89.2MB
- Sample260916-25bv5sfd46
- SHA256 9bb09b5de7c8a8577d0ae52d6162d98d0b461d44a8618232589cf1d532b7cbb4
- MD5 26be8bcc6e1b69bdada09d53c23bb46a
- SHA1 20546dcfa422e60010216e4a336a598db4d4b4c9
- SHA512 7f3bb5f3deac7037b778493b5c27759b71e87bb6270def581b1a6d4b6554a0d504a870fd447dcd68257296de448090d704ecef9d6725d30b340cd06f255b4748
- SSDEEP 1572864:/hBu9Z0g7agaeZA9llhhcus8nF3EaN44uzXoHcM5fB8zEybNl0gyGKzRQp+grkO:G9Z0QaMSl6us8FfFu0pfBtybNmgiap+I
- TLSH T1F32833536891076AD82B9338C476A661ADBA3C1C5B3177E32E90BB7C3E313C165F5B18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detects Windows executables referencing non-Windows User-Agents 3 IoCs
resource yara_rule behavioral2/memory/2408-1-0x0000000750000000-0x0000000750298000-memory.dmp INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA behavioral2/memory/2408-2-0x0000000750000000-0x0000000750298000-memory.dmp INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA behavioral2/memory/2408-3-0x0000000750000000-0x0000000750298000-memory.dmp INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2408 2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe 2408 2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe 2408 2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe 2408 2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe 2408 2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe 2408 2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-16_26be8bcc6e1b69bdada09d53c23bb46a_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2408