Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/06/2026, 20:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_bdae391668d3a339103c15e66699e488_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_bdae391668d3a339103c15e66699e488_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
General
- Target 2026-06-25_bdae391668d3a339103c15e66699e488_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 2.9MB
- Sample260629-yt9fgset4s
- SHA256 d0fc917240c2eb7a3210299f7167c195dc651383ec3c4aa817ac7051d8c25848
- MD5 bdae391668d3a339103c15e66699e488
- SHA1 9d85c70b35cbdabf2e5ed8e0731912cfda6050cd
- SHA512 2ca5758f7be99f28a1c462f7eb61cbd43dc842bba334ebd546a4205e3e1f280438b8adabffa387c082477814f78a706187d3eedd791b5883a8eaae2622a8cc8b
- SSDEEP 49152:f49m7DCG0cf+WD3RGj1nzRaao+jAe2PW+:fXTR+sao+jAbu+
- TLSH T168E57C0BBCE509E9C4AA623289B652827B74BC490F3223D72E90B3783F727E45D75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-25_bdae391668d3a339103c15e66699e488_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-25_bdae391668d3a339103c15e66699e488_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵PID:5952
-
C:\Users\Admin\AppData\Local\Temp\2026-06-25_bdae391668d3a339103c15e66699e488_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exeC:\Users\Admin\AppData\Local\Temp\2026-06-25_bdae391668d3a339103c15e66699e488_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe1⤵PID:1108