Analysis
- max time kernel
148s - max time network
111s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/07/2026, 20:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 3.3MB
- Sample260713-zl5b8sat21
- SHA256 a3714081253eee3bf9d64e58e6967a66362d02a443c2fa06a337949c69bbc2a1
- MD5 eee4452ba0331cc6c3e960b6ff426aee
- SHA1 389fce7e69aaea6d37ee52a1deaf4aa9f01e28b0
- SHA512 cc6e3624d682acbe65196f597ceefbd8b0187229727ea8a999b1616169ea982b5fc9b57370a72f2239ec459c664f4a73b96dddb093bdfaf88d524279ad7a2533
- SSDEEP 49152:+dupRbAqkjZ0JJA8djLUoHcFfIUJIPlOtH8wn:+K/JAKj4oHcFfIqIPotH
- TLSH T164F57C0BBDA148E9C09E933198B755967BB5BC080F3223DB2E5077782E72BD09D35B64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 248 2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 248 2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 248 2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 248 2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 248 2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 248 2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 248 2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-13_eee4452ba0331cc6c3e960b6ff426aee_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:248