General
- Target 2026-07-06_c8f0088dfb1a4760445cf4587bd56ff1_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- Sample260707-bcbfssby6q
- SHA256 a109ec5ed1f7b5532fad17c10ff7a46d2b33e8123e2240065c277e64ddbc0e76
- MD5 c8f0088dfb1a4760445cf4587bd56ff1
- SHA1 667be6f9cd5f8184d2639c254fd01ddce487c27d
- SHA512 a9e7abb54e7334784c46864fa87c32bfa3452409ff2291016e94a74def67faf8008be4375e01aa7e91a4bfb49f3edda954f3bbd80344867ad57a2cf6c77c7f74
- SSDEEP 49152:mYGq+q8ddKQW0cLI6rBoypWAQiUG9dNpjYMIwBYH+:m+JyNi7jYVwB
- TLSH T135068C87BD9108A9E09AA33188B7529A7BB4BC481F3127D72E50F7782F727C0587675C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_c8f0088dfb1a4760445cf4587bd56ff1_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_c8f0088dfb1a4760445cf4587bd56ff1_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_c8f0088dfb1a4760445cf4587bd56ff1_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.6MB
- SHA256 a109ec5ed1f7b5532fad17c10ff7a46d2b33e8123e2240065c277e64ddbc0e76
- MD5 c8f0088dfb1a4760445cf4587bd56ff1
- SHA1 667be6f9cd5f8184d2639c254fd01ddce487c27d
- SHA512 a9e7abb54e7334784c46864fa87c32bfa3452409ff2291016e94a74def67faf8008be4375e01aa7e91a4bfb49f3edda954f3bbd80344867ad57a2cf6c77c7f74
- SSDEEP 49152:mYGq+q8ddKQW0cLI6rBoypWAQiUG9dNpjYMIwBYH+:m+JyNi7jYVwB
- TLSH T135068C87BD9108A9E09AA33188B7529A7BB4BC481F3127D72E50F7782F727C0587675C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.