Analysis
- max time kernel
148s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
04/06/2026, 01:41
General
- Target 2026-06-04_ab3a72782e858b1fecba2b34ca5efa60_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 2.9MB
- Sample260604-b4jaqagw2t
- SHA256 1ecbeff2791e9c710d4b9434e4da3a1e0372e7583ca172535b83f65ce2deeb00
Score
1/10
Malware Config
Signatures
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-04_ab3a72782e858b1fecba2b34ca5efa60_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-04_ab3a72782e858b1fecba2b34ca5efa60_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\2026-06-04_ab3a72782e858b1fecba2b34ca5efa60_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exeC:\Users\Admin\AppData\Local\Temp\2026-06-04_ab3a72782e858b1fecba2b34ca5efa60_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe1⤵