General
- Target 2026-08-05_8d7630830ed54f063c16596e87511178_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.7MB
- Sample260805-dfjyfsak2w
- SHA256 fe139f5e79bb85516fb7405e8a92f0a9465bb06ca1d7fd623d45ff162e2a9460
- MD5 8d7630830ed54f063c16596e87511178
- SHA1 69bfe67d0304de4037f51d13d858f1a77a9a7528
- SHA512 a2c8ec122581d135182ce7c15f4f7671767bf18e171e292ba18e823d6393c2a0d3ce66cab3b56cd7311560977610477c6732a28d6e4cbb041963a4455e6a7eb9
- SSDEEP 98304:KdR3g4LOkAliQ0ykuYAIJ1tIXaNByaKlP7ISY1ofa:KzpYiFyDYFJ/Owq7ISY1J
- TLSH T172367B07ACA148F5C599E735C4B78256BA24BC0D4B3023E32E907EB82F727D29E75764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_8d7630830ed54f063c16596e87511178_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_8d7630830ed54f063c16596e87511178_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_8d7630830ed54f063c16596e87511178_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.7MB
- SHA256 fe139f5e79bb85516fb7405e8a92f0a9465bb06ca1d7fd623d45ff162e2a9460
- MD5 8d7630830ed54f063c16596e87511178
- SHA1 69bfe67d0304de4037f51d13d858f1a77a9a7528
- SHA512 a2c8ec122581d135182ce7c15f4f7671767bf18e171e292ba18e823d6393c2a0d3ce66cab3b56cd7311560977610477c6732a28d6e4cbb041963a4455e6a7eb9
- SSDEEP 98304:KdR3g4LOkAliQ0ykuYAIJ1tIXaNByaKlP7ISY1ofa:KzpYiFyDYFJ/Owq7ISY1J
- TLSH T172367B07ACA148F5C599E735C4B78256BA24BC0D4B3023E32E907EB82F727D29E75764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger