Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/06/2026, 22:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_5f1deb14497184c37453f4930b86cfeb_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_5f1deb14497184c37453f4930b86cfeb_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
General
- Target 2026-06-25_5f1deb14497184c37453f4930b86cfeb_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 2.9MB
- Sample260629-12e8qagt4x
- SHA256 5573010059ceeba3dccb67c434ab675e19570097240216b0d78d5a3655b7f081
- MD5 5f1deb14497184c37453f4930b86cfeb
- SHA1 7280a0716e3bfe9a1fb1f956183d9d9e985cd887
- SHA512 48632cf74203d0484ed0fcd55d28b9e9501f52baab3819d65c5f3c793b85462592f7618f3b339d63b8d7006413360d1a12e5c9762ae6dd06307897702eda774c
- SSDEEP 49152:f49m7DCG0cf+WD3Rxj1nzRaao+jAe2PW+:fXTR/sao+jAbu+
- TLSH T16DE57C0BBCE509E9C4AA623289B652827B74BC490F3223D72E90B3783F727E45D75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-25_5f1deb14497184c37453f4930b86cfeb_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-25_5f1deb14497184c37453f4930b86cfeb_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵PID:5960
-
C:\Users\Admin\AppData\Local\Temp\2026-06-25_5f1deb14497184c37453f4930b86cfeb_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exeC:\Users\Admin\AppData\Local\Temp\2026-06-25_5f1deb14497184c37453f4930b86cfeb_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe1⤵PID:6712