General
- Target 2026-07-12_ec3a4d46d26a31779ddbac9b27932b72_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- Sample260712-s9de4acw2l
- SHA256 eeebf4eebf9b336aeec4265482c5ffeb937b0b75670e9ccae2210869078d949f
- MD5 ec3a4d46d26a31779ddbac9b27932b72
- SHA1 af4d57be14ec6f9a2e2659248695902a3c8e1a95
- SHA512 77cf40c113c11ffef2cc4511f824cac1da98593cccfc505749ce293d625e0fb9409f8858215cc9634c1818355f8c669da3c55fcc41ad9b0998e01409b4962fb7
- SSDEEP 49152:hi7xhuh5mqkPLJdZelcx15v0ToRPIjmSf6tJ6PKemQrp8WM:hqDrelQLcURPbrSmKy
- TLSH T137F59C07BD9149E9C08E923298B281967B75BC4D4F3227DB2E90B7382F767D06C36B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_ec3a4d46d26a31779ddbac9b27932b72_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_ec3a4d46d26a31779ddbac9b27932b72_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_ec3a4d46d26a31779ddbac9b27932b72_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.3MB
- SHA256 eeebf4eebf9b336aeec4265482c5ffeb937b0b75670e9ccae2210869078d949f
- MD5 ec3a4d46d26a31779ddbac9b27932b72
- SHA1 af4d57be14ec6f9a2e2659248695902a3c8e1a95
- SHA512 77cf40c113c11ffef2cc4511f824cac1da98593cccfc505749ce293d625e0fb9409f8858215cc9634c1818355f8c669da3c55fcc41ad9b0998e01409b4962fb7
- SSDEEP 49152:hi7xhuh5mqkPLJdZelcx15v0ToRPIjmSf6tJ6PKemQrp8WM:hqDrelQLcURPbrSmKy
- TLSH T137F59C07BD9149E9C08E923298B281967B75BC4D4F3227DB2E90B7382F767D06C36B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger