General
- Target 2026-08-11_ef2a38d185b1a0f93b88fc768043071a_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_quasar-rat_salatstealer_sliver
- Size 5.0MB
- Sample260811-3pp89svaje
- SHA256 5ff4c2c395f54fa249c32c8c46c99ccf7e91d56311cf40b8390521246eb38174
- MD5 ef2a38d185b1a0f93b88fc768043071a
- SHA1 0141ce4ae3e11be503b0a3bf1f8562ad6be9db05
- SHA512 98d8be2b67e2695f47f227b6a4c1ac0277f4e0b9accf290b6f9b4a625ff51ae8c17e7cc941469ab0e5a443b64008545d3dd00c19febb842a0e608f5ee61d762a
- SSDEEP 49152:l05nkhoygC9G4FYkogI0yKM7Bjy5EZj7YDBi2ENoiSzM0KFFg4yrXGvnLb1yKwnO:l2yokYkoBOEdED/rzM1FaXknL/oULr9B
- TLSH T17F368D47FCA049A9C4AAA331C9A792927B71BC084B3263D73A50B7783F767D45DB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_ef2a38d185b1a0f93b88fc768043071a_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_ef2a38d185b1a0f93b88fc768043071a_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_ef2a38d185b1a0f93b88fc768043071a_dosia_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_quasar-rat_salatstealer_sliver
- Size 5.0MB
- SHA256 5ff4c2c395f54fa249c32c8c46c99ccf7e91d56311cf40b8390521246eb38174
- MD5 ef2a38d185b1a0f93b88fc768043071a
- SHA1 0141ce4ae3e11be503b0a3bf1f8562ad6be9db05
- SHA512 98d8be2b67e2695f47f227b6a4c1ac0277f4e0b9accf290b6f9b4a625ff51ae8c17e7cc941469ab0e5a443b64008545d3dd00c19febb842a0e608f5ee61d762a
- SSDEEP 49152:l05nkhoygC9G4FYkogI0yKM7Bjy5EZj7YDBi2ENoiSzM0KFFg4yrXGvnLb1yKwnO:l2yokYkoBOEdED/rzM1FaXknL/oULr9B
- TLSH T17F368D47FCA049A9C4AAA331C9A792927B71BC084B3263D73A50B7783F767D45DB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.