Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 00:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_c7018d890bde6a931fedabe15fc0d69a_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_c7018d890bde6a931fedabe15fc0d69a_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-11_c7018d890bde6a931fedabe15fc0d69a_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
- Size 3.0MB
- Sample260811-a17ngabe83
- SHA256 248eccd857f3f74ce9058b9380a05af888d4e06e59f94625df3c31535ec2b983
- MD5 c7018d890bde6a931fedabe15fc0d69a
- SHA1 b9770613a50a69bb56ee3de03448348eb3be7dc4
- SHA512 0166a86911587e37c606ace372c5a1852b276e01c2d930b96a0cee0280a2c8444130fe5ab80ebf6f2b4f266d72b2ca1dcb82a0a11209ac223cc28e2bb107b2da
- SSDEEP 24576:23d23WPxObZvZPcY4W5gKNQrju2nfZ4Mpc03pJsfL3y+jZYvk3EKn1ExWJBCiBIv:qdkWP0ZPcY4W5tMjb5+LbYvk3EKny4L
- TLSH T1E0E57C46BCE548E5C07EA2358A726152BBB07C580F3163D36E60B7382F72BE4AD79750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2452 2026-08-11_c7018d890bde6a931fedabe15fc0d69a_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe 2452 2026-08-11_c7018d890bde6a931fedabe15fc0d69a_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-11_c7018d890bde6a931fedabe15fc0d69a_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-11_c7018d890bde6a931fedabe15fc0d69a_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2452