General
- Target 2026-08-09_06c4b0b6849fc75da9e47787b8658fdb_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.4MB
- Sample260809-etsceshk6s
- SHA256 d033820861caee056d6b27628690c24b4e32534ed1abb74f54c0bc08bf136906
- MD5 06c4b0b6849fc75da9e47787b8658fdb
- SHA1 332a42d05a1a80be7f9d5d3739d4e463939b0c41
- SHA512 cd7f8d7738a3286c2af5f49126eb6e8744645752df8b022d2ae6b4890cf71671b9e0863ef2abb1cf2ac76b2c285d62cff84df8eb2cedfb3982a5f4aec769f7cc
- SSDEEP 98304:XEZg+a6I9Yzc9EF0XKwASKw4bKXyP4G2wriOH+WbR0oYZKG1CIsFaDwDjRJEeX3d:Xsgj8JGjQ
- TLSH T11C265A03BEA508F9C09AA73189B75252BB74BC0C4B3133E32E50AA782F767D15D79B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_06c4b0b6849fc75da9e47787b8658fdb_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_06c4b0b6849fc75da9e47787b8658fdb_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_06c4b0b6849fc75da9e47787b8658fdb_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.4MB
- SHA256 d033820861caee056d6b27628690c24b4e32534ed1abb74f54c0bc08bf136906
- MD5 06c4b0b6849fc75da9e47787b8658fdb
- SHA1 332a42d05a1a80be7f9d5d3739d4e463939b0c41
- SHA512 cd7f8d7738a3286c2af5f49126eb6e8744645752df8b022d2ae6b4890cf71671b9e0863ef2abb1cf2ac76b2c285d62cff84df8eb2cedfb3982a5f4aec769f7cc
- SSDEEP 98304:XEZg+a6I9Yzc9EF0XKwASKw4bKXyP4G2wriOH+WbR0oYZKG1CIsFaDwDjRJEeX3d:Xsgj8JGjQ
- TLSH T11C265A03BEA508F9C09AA73189B75252BB74BC0C4B3133E32E50AA782F767D15D79B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger