General
- Target 2026-07-12_e19f3dcb4ba7fb17150cb5080383cecb_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- Sample260712-3ryy7abz2t
- SHA256 09e735c7bbb401d40c1d7f42a9fbb2af03538e9316bbf9e8675b12f215f4cb1f
- MD5 e19f3dcb4ba7fb17150cb5080383cecb
- SHA1 9649b737e2fa51ca559ae066d0033a15d3cb0fea
- SHA512 03d83461b9fe7ce574174a621f12c106a08977b94a741e1d6401a7f3e7842e4d635c64c1e988d6b0c1ded4fb9653c6f8a1ed8f685969d233d0e6ea5b04f2420a
- SSDEEP 49152:6Pj+shhc1lOwteQfhyad8PSbtAQ0QeLUFpUvx/CAwPwyVA6v8q1:6LlefhOPSb6QbegH4VCzPwyL
- TLSH T1ADF59C07BDA105EAC09E9232C8A755A67B71BC080F3263DB2E50BB782F727D45C76B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_e19f3dcb4ba7fb17150cb5080383cecb_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_e19f3dcb4ba7fb17150cb5080383cecb_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_e19f3dcb4ba7fb17150cb5080383cecb_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- SHA256 09e735c7bbb401d40c1d7f42a9fbb2af03538e9316bbf9e8675b12f215f4cb1f
- MD5 e19f3dcb4ba7fb17150cb5080383cecb
- SHA1 9649b737e2fa51ca559ae066d0033a15d3cb0fea
- SHA512 03d83461b9fe7ce574174a621f12c106a08977b94a741e1d6401a7f3e7842e4d635c64c1e988d6b0c1ded4fb9653c6f8a1ed8f685969d233d0e6ea5b04f2420a
- SSDEEP 49152:6Pj+shhc1lOwteQfhyad8PSbtAQ0QeLUFpUvx/CAwPwyVA6v8q1:6LlefhOPSb6QbegH4VCzPwyL
- TLSH T1ADF59C07BDA105EAC09E9232C8A755A67B71BC080F3263DB2E50BB782F727D45C76B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger