2026-07-23_8f3fdc7be87a77524918a89104391085_cobalt-strike_frostygoop_ghostlocker_hive_luca-stealer_salatstealer_sliver_snatch

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_8f3fdc7be87a77524918a89104391085_cobalt-strike_frostygoop_ghostlocker_hive_luca-stealer_salatstealer_sliver_snatch
Size 4.4MB
Sample260723-fdypya1dld
SHA256 a255ee249e7e330aa5f0d9daceb14c2061e6426e765ba7486121d659a47d82d7
MD5 8f3fdc7be87a77524918a89104391085
SHA1 f27beb57be463cd1d748776a0a1ea1de070d9f42
SHA512 90ff6048910e45333693fce0c7be59416564ffb751014584efef14cba8fa8ef2243abe45b9b032e3ff274f3cb12d8d2b531142a6057fb035cb900465eeffbe5a
SSDEEP 49152:cXse0rb/T2vO90dL3BmAFd4A64nsfJMayLhja1/dVIwAQ2fgSTvOc+Ue9BTD1w8y:m0yLhgHx6HIU8LCUy2MAk/JNaB2Yyjl
TLSH
T11F269D03B854A4B9C5EA9130C9B992817631BC850B3067D33F15FABA2F737D49E793A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_8f3fdc7be87a77524918a89104391085_cobalt-strike_frostygoop_ghostlocker_hive_luca-stealer_salatstealer_sliver_snatch

File Explorer

2026-07-23_8f3fdc7be87a77524918a89104391085_cobalt-strike_frostygoop_ghostlocker_hive_luca-stealer_salatstealer_sliver_snatch

.exe 4.4MB

2026-07-23_8f3fdc7be87a77524918a89104391085_cobalt-strike_frostygoop_ghostlocker_hive_luca-stealer_salatstealer_sliver_snatch

IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
SHA256 a255ee249e7e330aa5f0d9daceb14c2061e6426e765ba7486121d659a47d82d7
MD5 8f3fdc7be87a77524918a89104391085
SHA1 f27beb57be463cd1d748776a0a1ea1de070d9f42
SHA512 90ff6048910e45333693fce0c7be59416564ffb751014584efef14cba8fa8ef2243abe45b9b032e3ff274f3cb12d8d2b531142a6057fb035cb900465eeffbe5a
SSDEEP 49152:cXse0rb/T2vO90dL3BmAFd4A64nsfJMayLhja1/dVIwAQ2fgSTvOc+Ue9BTD1w8y:m0yLhgHx6HIU8LCUy2MAk/JNaB2Yyjl
TLSH
T11F269D03B854A4B9C5EA9130C9B992817631BC850B3067D33F15FABA2F737D49E793A4
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

405792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

112KB

Virtual Size

479KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

295B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

217KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

521KB

Virtual Size

520KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

239KB

Virtual Size

238KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/90

Size

65KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

788KB

Virtual Size

792KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-07-23_8f3fdc7be87a77524918a89104391085_cobalt-strike_frostygoop_ghostlocker_hive_luca-stealer_salatstealer_sliver_snatch

kernel32

generic