General
- Target 2026-08-08_debc35ce0a7b376ffdedd3a47c1384a0_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.4MB
- Sample260808-yrqklatepc
- SHA256 5d4eb320ac73b9ea2ac0a5b35a9f686591622d8a52c3e7a4f5c230badc1251d3
- MD5 debc35ce0a7b376ffdedd3a47c1384a0
- SHA1 a9b298bc905a43ce3261696ff6bbc765367c022d
- SHA512 9b5012477286f8e7b5e66b4a5f4cb8021bf00cbd13503e0f5c0e3c9efc4ed3faa045d9c1e3191405b0d48e4b601c113a8f98c91465a1ae627f82656542d3eee1
- SSDEEP 49152:u6rEr6xPj08yP03O/qk/aYZj5Ah3SZiRwAUF3JorAgvKc1u:uP/RykBMyiqFJ+y
- TLSH T1A7265B03BDA508F9C09AA73189B75252BB74BC4C4B3123E32E50BA782F767D16E35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_debc35ce0a7b376ffdedd3a47c1384a0_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_debc35ce0a7b376ffdedd3a47c1384a0_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_debc35ce0a7b376ffdedd3a47c1384a0_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.4MB
- SHA256 5d4eb320ac73b9ea2ac0a5b35a9f686591622d8a52c3e7a4f5c230badc1251d3
- MD5 debc35ce0a7b376ffdedd3a47c1384a0
- SHA1 a9b298bc905a43ce3261696ff6bbc765367c022d
- SHA512 9b5012477286f8e7b5e66b4a5f4cb8021bf00cbd13503e0f5c0e3c9efc4ed3faa045d9c1e3191405b0d48e4b601c113a8f98c91465a1ae627f82656542d3eee1
- SSDEEP 49152:u6rEr6xPj08yP03O/qk/aYZj5Ah3SZiRwAUF3JorAgvKc1u:uP/RykBMyiqFJ+y
- TLSH T1A7265B03BDA508F9C09AA73189B75252BB74BC4C4B3123E32E50BA782F767D16E35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Suspicious use of NtSetInformationThreadHideFromDebugger