43d565728e0828b11b39435b062dba1cc1faa5943a7aaea625b26114d41a1ab9

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 08:24

Target
2026-08-12_e46d0a6f9b797c1de63850505161c99b_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Size 3.4MB
Sample260812-kapp3ssdja
SHA256 43d565728e0828b11b39435b062dba1cc1faa5943a7aaea625b26114d41a1ab9
MD5 e46d0a6f9b797c1de63850505161c99b
SHA1 117bdc3eeb0d8cea3184900507c4e009d4c9e8a4
SHA512 94e1016d79630801eae0ebdf2d41b7da0a44646218dd68ced2c1323ce1c8cfc5d82f05f6d70b7392a9c6ac8a49e5e13060548d76a12da40f6f410443ffc353f6
SSDEEP 49152:nDxmwxSaiGjVe3OTtMWR5OEDmSKCgllAN3IX+NGyQ1oKn+k:DuiZ5OYmS1gnAN5NPy
TLSH
T1F0F58D47BC9548BAC4A9A331C9A282937A76BC490F3267D73E50F3792FB2BD05935350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1480	2026-08-12_e46d0a6f9b797c1de63850505161c99b_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-12_e46d0a6f9b797c1de63850505161c99b_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-12_e46d0a6f9b797c1de63850505161c99b_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1480