Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 03:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_5b7a2d9932fe1b5ebbba74ea41be1869_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_5b7a2d9932fe1b5ebbba74ea41be1869_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-28_5b7a2d9932fe1b5ebbba74ea41be1869_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
- Size 8.6MB
- Sample261030-ec72jsdb86
- SHA256 14893114df65cfb3e0fa43b5fd446d4a1ed8923530ecdb06a946191977fc6e94
- MD5 5b7a2d9932fe1b5ebbba74ea41be1869
- SHA1 d43a2a36a0bb7bf1877dcf157a65fc0f83fdb9b0
- SHA512 7cf09a5a26b557e2f9ee8b400507b299ab604665b90b8315270695cd0e157aa40dfc2d27ca4d9e16083b42361dfc0f732196d0651d119db1f7d67a52e5737e47
- SSDEEP 196608:kLs7RhrGTmNNkK+Y7X0gfojVqLodJq+/+A6:T6TmNUYrtfC3JjG
- TLSH T17996AE03ADB091F8C59AC234C1275052BAB9BC9CD73932973E80A9B53F65BD05B76F84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 2 IoCs
description ioc Process Key created \Registry\User\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\CLSID\{9B4B061D-8F00-4507-9664-7C344EFF5794} 2026-10-28_5b7a2d9932fe1b5ebbba74ea41be1869_frostygoop_hive_luca-stealer_salatstealer_sliver.exe Set value (data) \REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\CLSID\{9B4B061D-8F00-4507-9664-7C344EFF5794}\Blob_F1CDC81C = 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 2026-10-28_5b7a2d9932fe1b5ebbba74ea41be1869_frostygoop_hive_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-28_5b7a2d9932fe1b5ebbba74ea41be1869_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-28_5b7a2d9932fe1b5ebbba74ea41be1869_frostygoop_hive_luca-stealer_salatstealer_sliver.exe"1⤵
- Modifies registry class
PID:4672