General
- Target 2026-06-26_fc81df740f993c56084787b22a45a70d_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.4MB
- Sample260629-mxejqsbs3x
- SHA256 ffb1ae8bc37cf48e0d174b4ad1e466f3ca518b328120a24500af491ec96f8cdd
- MD5 fc81df740f993c56084787b22a45a70d
- SHA1 c32d076b9ae568c1d41c60d0f139ad9a5804897b
- SHA512 471cedcbb8e855a789e095a3c0ee0caba19b9f9b5ad5acf55376db5fb8c1db92e7bf642edac0fa90f0558ab21863b9003cb7bf130f5785e63803e6b715734aec
- SSDEEP 49152:WokcevLBWwXdUUK2UbLnJFxdkJNDP7RERbyzrdz1bT:W1XXyBHn/8Xr7RWby7
- TLSH T161F58D0BBD9014F5D09AA33288B645467B76BC4C4F3523DB3E60BA782E727D09D36B58
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_fc81df740f993c56084787b22a45a70d_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_fc81df740f993c56084787b22a45a70d_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_fc81df740f993c56084787b22a45a70d_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.4MB
- SHA256 ffb1ae8bc37cf48e0d174b4ad1e466f3ca518b328120a24500af491ec96f8cdd
- MD5 fc81df740f993c56084787b22a45a70d
- SHA1 c32d076b9ae568c1d41c60d0f139ad9a5804897b
- SHA512 471cedcbb8e855a789e095a3c0ee0caba19b9f9b5ad5acf55376db5fb8c1db92e7bf642edac0fa90f0558ab21863b9003cb7bf130f5785e63803e6b715734aec
- SSDEEP 49152:WokcevLBWwXdUUK2UbLnJFxdkJNDP7RERbyzrdz1bT:W1XXyBHn/8Xr7RWby7
- TLSH T161F58D0BBD9014F5D09AA33288B645467B76BC4C4F3523DB3E60BA782E727D09D36B58
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger