Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 04:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_5313eaf6203af2f2b0d9b517bd4c2b1f_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_5313eaf6203af2f2b0d9b517bd4c2b1f_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-28_5313eaf6203af2f2b0d9b517bd4c2b1f_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
- Size 5.2MB
- Sample261030-e7k59saw6p
- SHA256 49823073a8ebda3e386b04cc557d8448cc6c0fe547d978aa2647a96429b0d683
- MD5 5313eaf6203af2f2b0d9b517bd4c2b1f
- SHA1 42a5c11ed25722a88ba3d6b637f24c9721422f51
- SHA512 22cbc413f859ab4152604caca66e1330f67f7e8bc70a9e6b4473ccb55cf3e12f4c8b5ec913a86bdd366f6d7aee01ad6de33e243d4b5432e1f81411166d64be05
- SSDEEP 49152:nJu7oygkr5TDTCDTqY038Xb8uk/nXUOIV9j0wp7km+eE9XGFY9czPoAfK:JV+ZTKTqt08uk/nk9j0wpgm+
- TLSH T108465B03BE5091A4C5AACB38CA275123BAB5BC8CD73533973E506A743F65BD06BB5B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\CLSID\{D6B0EF7B-40B4-4CDC-B580-B466358D9ABC} 2026-10-28_5313eaf6203af2f2b0d9b517bd4c2b1f_frostygoop_hive_luca-stealer_salatstealer_sliver.exe Set value (data) \REGISTRY\USER\S-1-5-21-53044966-3830981193-2402648431-1000_Classes\CLSID\{D6B0EF7B-40B4-4CDC-B580-B466358D9ABC}\State_9D31C9C9 = 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 2026-10-28_5313eaf6203af2f2b0d9b517bd4c2b1f_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-28_5313eaf6203af2f2b0d9b517bd4c2b1f_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-28_5313eaf6203af2f2b0d9b517bd4c2b1f_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"1⤵
- Modifies registry class
PID:1436