General
- Target 2026-08-06_0fac3637d03d8a9800851ba8e811d1af_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 5.1MB
- Sample260806-q79peaxtax
- SHA256 c83500172fa78f9bcd1d2a58b6586b555840dc90c0ee5b3504761e7a9f1d8577
- MD5 0fac3637d03d8a9800851ba8e811d1af
- SHA1 b4f9533fcfddf86dfff1c5dd3c1c937947f2ba07
- SHA512 2470e54f667d585d4110a7e879790f9b2343be349b84b04a2d64ee525ae5678c1b02c4bf5193720d4fa49cf6394ca0f2647d0f812adfab85948e18b02f371539
- SSDEEP 49152:QWqUYWNhzzOx8SLz71dsVXd4yRYHefLKtvK24q9zhCCKxxD638s9MALLFArDK+Dh:QW67soKYHefLa5TQCe
- TLSH T153467B17AE9048F5C08AE635C8B7821A7A74BC0D4B3123E32E91BE782F727D15E75794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_0fac3637d03d8a9800851ba8e811d1af_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_0fac3637d03d8a9800851ba8e811d1af_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_0fac3637d03d8a9800851ba8e811d1af_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 5.1MB
- SHA256 c83500172fa78f9bcd1d2a58b6586b555840dc90c0ee5b3504761e7a9f1d8577
- MD5 0fac3637d03d8a9800851ba8e811d1af
- SHA1 b4f9533fcfddf86dfff1c5dd3c1c937947f2ba07
- SHA512 2470e54f667d585d4110a7e879790f9b2343be349b84b04a2d64ee525ae5678c1b02c4bf5193720d4fa49cf6394ca0f2647d0f812adfab85948e18b02f371539
- SSDEEP 49152:QWqUYWNhzzOx8SLz71dsVXd4yRYHefLKtvK24q9zhCCKxxD638s9MALLFArDK+Dh:QW67soKYHefLa5TQCe
- TLSH T153467B17AE9048F5C08AE635C8B7821A7A74BC0D4B3123E32E91BE782F727D15E75794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger