General
- Target 2026-07-28_6ed573daa2ceb02d6cc52c35bffe4159_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.2MB
- Sample260728-dmb67aef64
- SHA256 79994bec31daa5dfd6a94dfb523bbe8da13299dcae2fc9192ea165368df31594
- MD5 6ed573daa2ceb02d6cc52c35bffe4159
- SHA1 e860d9c7ac4fb63e10e8e7458e95bc50862b4e0c
- SHA512 7802ed54d475fe0ee12b06465f0c736213fe8752b01d89b9d07a4bc5354502a22e7490bd961540a4d80be99b33df9db58c61e626140f7828f34fddaea26912d0
- SSDEEP 49152:Ayf+QPkNV/tsMiPPRLl+qfDo93D6wxPx202A2sTNTxS8geacOo8FwBWNVvc7DFio:AymQPBooupO31ggmx
- TLSH T175F58D077CA149E9C0AEA33288A65191BB71BC490B3673D72E50BA783F727D1DD75B80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_6ed573daa2ceb02d6cc52c35bffe4159_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_6ed573daa2ceb02d6cc52c35bffe4159_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_6ed573daa2ceb02d6cc52c35bffe4159_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.2MB
- SHA256 79994bec31daa5dfd6a94dfb523bbe8da13299dcae2fc9192ea165368df31594
- MD5 6ed573daa2ceb02d6cc52c35bffe4159
- SHA1 e860d9c7ac4fb63e10e8e7458e95bc50862b4e0c
- SHA512 7802ed54d475fe0ee12b06465f0c736213fe8752b01d89b9d07a4bc5354502a22e7490bd961540a4d80be99b33df9db58c61e626140f7828f34fddaea26912d0
- SSDEEP 49152:Ayf+QPkNV/tsMiPPRLl+qfDo93D6wxPx202A2sTNTxS8geacOo8FwBWNVvc7DFio:AymQPBooupO31ggmx
- TLSH T175F58D077CA149E9C0AEA33288A65191BB71BC490B3673D72E50BA783F727D1DD75B80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger