General
- Target 2026-08-08_94522279cf32e5c3375896a482439d36_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.4MB
- Sample260809-agpcsawhma
- SHA256 991b933fd0cf3cdc5ecabd1919852c56aa8e5fcfadef4c699f7cdc915aed27dd
- MD5 94522279cf32e5c3375896a482439d36
- SHA1 a61dcedb9a6f7fade82117cd698a1cce3750a684
- SHA512 083ba84d65a905dbea38d855642d540e853b2363f15d9a6d0635ee2d003687e009bb9fc18fcbc0310a4334a70eb1fd87720e8705b62faaf3b77ce64f2b313d1a
- SSDEEP 49152:JlTJOjzcBuxgedMTU5FiaBkc2WcTeIFQtBZCmXQor0gFAcMC:J+VKsFAUIFWBssQ2/
- TLSH T1FC265A03BDA508F9C19AA73189B74252BB74BC4C4B3133E32E50AAB82F767D15E35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_94522279cf32e5c3375896a482439d36_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_94522279cf32e5c3375896a482439d36_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_94522279cf32e5c3375896a482439d36_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.4MB
- SHA256 991b933fd0cf3cdc5ecabd1919852c56aa8e5fcfadef4c699f7cdc915aed27dd
- MD5 94522279cf32e5c3375896a482439d36
- SHA1 a61dcedb9a6f7fade82117cd698a1cce3750a684
- SHA512 083ba84d65a905dbea38d855642d540e853b2363f15d9a6d0635ee2d003687e009bb9fc18fcbc0310a4334a70eb1fd87720e8705b62faaf3b77ce64f2b313d1a
- SSDEEP 49152:JlTJOjzcBuxgedMTU5FiaBkc2WcTeIFQtBZCmXQor0gFAcMC:J+VKsFAUIFWBssQ2/
- TLSH T1FC265A03BDA508F9C19AA73189B74252BB74BC4C4B3133E32E50AAB82F767D15E35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger