General
- Target 2026-08-15_f3410789af95fd80dd8aa2f444038f63_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 21.1MB
- Sample260815-bdf3nscn31
- SHA256 e0ca4017a7ce9e320a327b677c014796234ac23aad0fa1c68358143862e61fb7
- MD5 f3410789af95fd80dd8aa2f444038f63
- SHA1 1c33a0f57669e961534e65f1f0baff379bcb8f48
- SHA512 e3aed1b942d44e014addaebd2b73744e14881ae2d1a1e92108ee89e54a141883ed1df5b04077e81abffbd76c7536560b6469a80c748f7263d7d907a0e2c6afbe
- SSDEEP 49152:7kN4xmssw2dvjbdPnokURjo0ULtvPDmLa1W4+k5Cce4602A16RriFpWJpNnXaD5E:7nsZRahY4OE
- TLSH T19A272302BDE41CBAC0ADD23584779A527B71BC444F25A3D73A90B3A92F77BD14A3A704
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-15_f3410789af95fd80dd8aa2f444038f63_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_f3410789af95fd80dd8aa2f444038f63_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 21.1MB
- SHA256 e0ca4017a7ce9e320a327b677c014796234ac23aad0fa1c68358143862e61fb7
- MD5 f3410789af95fd80dd8aa2f444038f63
- SHA1 1c33a0f57669e961534e65f1f0baff379bcb8f48
- SHA512 e3aed1b942d44e014addaebd2b73744e14881ae2d1a1e92108ee89e54a141883ed1df5b04077e81abffbd76c7536560b6469a80c748f7263d7d907a0e2c6afbe
- SSDEEP 49152:7kN4xmssw2dvjbdPnokURjo0ULtvPDmLa1W4+k5Cce4602A16RriFpWJpNnXaD5E:7nsZRahY4OE
- TLSH T19A272302BDE41CBAC0ADD23584779A527B71BC444F25A3D73A90B3A92F77BD14A3A704
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1