General
- Target 2026-08-17_4a50554f0b45dde3a0d96ef5ac372d73_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 86.0MB
- Sample260817-19pr5a1wc1
- SHA256 f87cef8e91ca5d6c7500a1ab1485bbd9e4f0e99322230a90541f03c29f68d711
- MD5 4a50554f0b45dde3a0d96ef5ac372d73
- SHA1 49404485407f1f81999a178a0409ae67f77ab56d
- SHA512 45cdf65f485e8ceb0b78a565784e2f91fc9c200728c455f5c85220565628da5a8e64b2fc5627ba7cd96d4abfa006a4764c61f0fcfc1c20e0d98a33c6c9126268
- SSDEEP 1572864:tVSrnu1rBRt2x8T8Lbuzt6OvwBuYn27mWvH/9ym2pfn48ZfwNPZ:tuIs8WupouYnoNvH/9ym228ZYNh
- TLSH T12F183347BC9688A9C0DAA639CDA392527B34B8440F3277DB3E90A6782F377D05D79710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_4a50554f0b45dde3a0d96ef5ac372d73_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_4a50554f0b45dde3a0d96ef5ac372d73_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_4a50554f0b45dde3a0d96ef5ac372d73_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 86.0MB
- SHA256 f87cef8e91ca5d6c7500a1ab1485bbd9e4f0e99322230a90541f03c29f68d711
- MD5 4a50554f0b45dde3a0d96ef5ac372d73
- SHA1 49404485407f1f81999a178a0409ae67f77ab56d
- SHA512 45cdf65f485e8ceb0b78a565784e2f91fc9c200728c455f5c85220565628da5a8e64b2fc5627ba7cd96d4abfa006a4764c61f0fcfc1c20e0d98a33c6c9126268
- SSDEEP 1572864:tVSrnu1rBRt2x8T8Lbuzt6OvwBuYn27mWvH/9ym2pfn48ZfwNPZ:tuIs8WupouYnoNvH/9ym228ZYNh
- TLSH T12F183347BC9688A9C0DAA639CDA392527B34B8440F3277DB3E90A6782F377D05D79710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger