General
- Target 2026-10-17_840c3459dab471c64410febd0481efea_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 93.8MB
- Sample261019-bh1ymswt2m
- SHA256 90025996e9fbc8d12ccaab37148118e7512cd7c75789f5c644dd5e859d64b3db
- MD5 840c3459dab471c64410febd0481efea
- SHA1 86001794e92f2663a9df1e23df0eb80c20758539
- SHA512 e6d4cfe7d2886354cebc0f3fb6dc0db85cb807181f7cb6bd296ba6c622a29e66e647fa005d3383b8dd2411ebd685e1e3d5f4ed22ee85878abaad9a1c5771c6a0
- SSDEEP 1572864:QhOv8bTJRvVTUKkJMxRrOn0V/bSNV2zaKafQ7+p3hjle4KSg7GJjBqtnFV:Q+8bNNVTULJSJO0V/bSNgeK6yeFgmByH
- TLSH T14328330369A185B1D495EB398A375262BA74FC4C473533E76F44BB782E327D2CAB4B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-17_840c3459dab471c64410febd0481efea_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_840c3459dab471c64410febd0481efea_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.8
Botnet
-
d813994ce1dbd4db71c3b48d6cf58bfc
C2
-
https://172.237.117.11
-
https://t.me/scii0n
-
https://steamcommunity.com/profiles/76561198622044578
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0
Targets
-
- Target 2026-10-17_840c3459dab471c64410febd0481efea_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 93.8MB
- SHA256 90025996e9fbc8d12ccaab37148118e7512cd7c75789f5c644dd5e859d64b3db
- MD5 840c3459dab471c64410febd0481efea
- SHA1 86001794e92f2663a9df1e23df0eb80c20758539
- SHA512 e6d4cfe7d2886354cebc0f3fb6dc0db85cb807181f7cb6bd296ba6c622a29e66e647fa005d3383b8dd2411ebd685e1e3d5f4ed22ee85878abaad9a1c5771c6a0
- SSDEEP 1572864:QhOv8bTJRvVTUKkJMxRrOn0V/bSNV2zaKafQ7+p3hjle4KSg7GJjBqtnFV:Q+8bNNVTULJSJO0V/bSNgeK6yeFgmByH
- TLSH T14328330369A185B1D495EB398A375262BA74FC4C473533E76F44BB782E327D2CAB4B01
- MD5 SHA1 SHA512 SSDEEP TLSH