Analysis
- max time kernel
148s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 15:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_8b9081a2b9962d67bf8ec63b8ce575f9_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_8b9081a2b9962d67bf8ec63b8ce575f9_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-30_8b9081a2b9962d67bf8ec63b8ce575f9_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 2.9MB
- Sample260730-spnqbsck21
- SHA256 32cba757e52fc181a02832ea46fccf0d3b9beda4485fa33955c9ddc45b4932aa
- MD5 8b9081a2b9962d67bf8ec63b8ce575f9
- SHA1 ce94ae3071554d44d584a999d2059701358a7dc7
- SHA512 39795830118d9d949ff154f8872215158a8499df577a913b8ed8b9081da5c1dd957d43619fef0f5e771e1c2f859109975e1b36faa7dc335f6bb328a64fd0b17e
- SSDEEP 49152:f49m7DCG0cf+WD3Rcj1nzRaao+jAe2PW+:fXTRQsao+jAbu+
- TLSH T1F2E57C0BBCE509E9C4AA623289B652827B74BC490F3223D72E90B3783F727E45D75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-30_8b9081a2b9962d67bf8ec63b8ce575f9_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-30_8b9081a2b9962d67bf8ec63b8ce575f9_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵PID:556
-
C:\Users\Admin\AppData\Local\Temp\2026-07-30_8b9081a2b9962d67bf8ec63b8ce575f9_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exeC:\Users\Admin\AppData\Local\Temp\2026-07-30_8b9081a2b9962d67bf8ec63b8ce575f9_frostygoop_ghostlocker_hive_knight_luca-stealer_salatstealer_sliver.exe1⤵PID:4716