2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
Size 2.6MB
Sample260729-padp2avyby
SHA256 b2e4a404301b6b1ad37caaba19951cc5b8975591023d6ff209ec3c1130e4cd8b
MD5 c7245b5bd4286b8fd1c2ae7c7d122944
SHA1 885768033028b9d5a22b43f6b4b160d1a24bdba8
SHA512 c29184bfbdc4dac3cbfb00adbcd191af75db97fd0fd04efeac2ebfdc7c167e0ae463bee41b122b47d6191d56baaac86eace6e4c07ec8dca86b16b6c0ae1c730b
SSDEEP 24576:/VIV4tKAUV1vJyWPEgpmEG8trfkpc+QU/prkjsDPvA2Bele5rK2y0HEcWF5m0UbI:/VI+t9U/JR5oF8fU/pr5B8OOcx
TLSH
T15CD54907BD9189E9C09E9231C8B691A67B75BC084F3223DB2E90BB783E727D05D35B54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver

File Explorer

2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver

.exe 2.6MB

2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 b2e4a404301b6b1ad37caaba19951cc5b8975591023d6ff209ec3c1130e4cd8b
MD5 c7245b5bd4286b8fd1c2ae7c7d122944
SHA1 885768033028b9d5a22b43f6b4b160d1a24bdba8
SHA512 c29184bfbdc4dac3cbfb00adbcd191af75db97fd0fd04efeac2ebfdc7c167e0ae463bee41b122b47d6191d56baaac86eace6e4c07ec8dca86b16b6c0ae1c730b
SSDEEP 24576:/VIV4tKAUV1vJyWPEgpmEG8trfkpc+QU/prkjsDPvA2Bele5rK2y0HEcWF5m0UbI:/VI+t9U/JR5oF8fU/pr5B8OOcx
TLSH
T15CD54907BD9189E9C09E9231C8B691A67B75BC084F3223DB2E90BB783E727D05D35B54
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

479712

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

1003KB

Virtual Size

1002KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

67KB

Virtual Size

360KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

129KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

207KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver

kernel32

generic