General
- Target 2026-07-12_840c03f0677c212dc6f082fa2510b2f7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.2MB
- Sample260712-1m1wwahs2q
- SHA256 dedf869ceebfb29735cbc62240a146007c0f6c00bdc2394b6730e31e66957d7a
- MD5 840c03f0677c212dc6f082fa2510b2f7
- SHA1 9adee429f515e921218fe62e48e05004472dd1a5
- SHA512 6996b898ebed0cbae50556215157363c6fe4616fc8b45b923559ce961454fc84dbf5dc103c4d676811ccf722bd030bec017c24a0532a73727368e54c44ef255d
- SSDEEP 49152:NEw/m8trnTszdC3A4iLX7V9KIToaoM6iqKtSwtZamJxsoIr:NslCw9D7V8IToal6iqK1tZa15
- TLSH T1FBF58C06BCE549E9C09EA33188B75196BB34BC490B3527E32E60B7782FB2BD05D71794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_840c03f0677c212dc6f082fa2510b2f7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_840c03f0677c212dc6f082fa2510b2f7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_840c03f0677c212dc6f082fa2510b2f7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.2MB
- SHA256 dedf869ceebfb29735cbc62240a146007c0f6c00bdc2394b6730e31e66957d7a
- MD5 840c03f0677c212dc6f082fa2510b2f7
- SHA1 9adee429f515e921218fe62e48e05004472dd1a5
- SHA512 6996b898ebed0cbae50556215157363c6fe4616fc8b45b923559ce961454fc84dbf5dc103c4d676811ccf722bd030bec017c24a0532a73727368e54c44ef255d
- SSDEEP 49152:NEw/m8trnTszdC3A4iLX7V9KIToaoM6iqKtSwtZamJxsoIr:NslCw9D7V8IToal6iqK1tZa15
- TLSH T1FBF58C06BCE549E9C09EA33188B75196BB34BC490B3527E32E60B7782FB2BD05D71794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger