Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
12/07/2026, 22:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 3.2MB
- Sample260712-2nb5kshv7l
- SHA256 7dfe589910b79da5e5e0d91d9502daea5d2b40abd28a8528f3f4dcd54752da90
- MD5 9769f17916277cac2a6eb57aa27aa0e7
- SHA1 836dea4e10b7a1db8883b33ec268721aea7fda66
- SHA512 aa3c966ec9191c3ff037dc0bd082fd8abbb9cba1afdd78d01b0e6d0495488412fc9bb59a0de8676a2ed454c46afb37008d8582d58374612abcb25c058d49e5f0
- SSDEEP 49152:uz93ScCrWis9U1L6GSDPnTTo7KP8NtNZMq7ISo6d:ucz1OxvTpPcOqdx
- TLSH T1C0F57B06BCE208F9D0AAA33189B79156BB35BC090B3127E72E50B7383E776D06D72755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1028 2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1028 2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 1028 2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 1028 2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 1028 2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 1028 2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 1028 2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-12_9769f17916277cac2a6eb57aa27aa0e7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:1028