f0ce5b67ad7fe8ef920eb5667eda46dd7fc25100063abcde6011bb8612ed49f0 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

2026-06-01...er.exe

windows10-2004-x64

1

2026-06-01...er.exe

windows11-21h2-x64

1

Analysis

max time kernel
148s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 01:18

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-06-01_88ca4b1016c254b0631f86540c3b8736_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

2026-06-01_88ca4b1016c254b0631f86540c3b8736_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target
2026-06-01_88ca4b1016c254b0631f86540c3b8736_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
Size 2.9MB
Sample260601-bn62vaaz2x
SHA256 f0ce5b67ad7fe8ef920eb5667eda46dd7fc25100063abcde6011bb8612ed49f0
MD5 88ca4b1016c254b0631f86540c3b8736
SHA1 3a0b7b66377b853be13e55e7b6b67cf9d05870ed
SHA512 ff8e00847bce2b93a43d05ad5cc3b2bef204f88b7236bebaf7d2e6c85fa5d24a82a04a736834c0de2b82b98bd5ac7554eaff7838eef8f5498708f1868a3bd184
SSDEEP 49152:f49m7DCG0cf+WD3ROj1nzRaao+jAe2PW+:fXTRmsao+jAbu+
TLSH
T14DE57C0BBCE509E9C4AA623289B652827B74BC490F3223D72E90B3783F727E45D75754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

Processes

C:\Users\Admin\AppData\Local\Temp\2026-06-01_88ca4b1016c254b0631f86540c3b8736_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-01_88ca4b1016c254b0631f86540c3b8736_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"
1⤵
PID:1324

C:\Users\Admin\AppData\Local\Temp\2026-06-01_88ca4b1016c254b0631f86540c3b8736_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
C:\Users\Admin\AppData\Local\Temp\2026-06-01_88ca4b1016c254b0631f86540c3b8736_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
1⤵
PID:2964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy