General
- Target 2026-08-17_37e5277222fcf07e078cde1bd0d07e89_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 88.0MB
- Sample260817-2e8r7aea83
- SHA256 26b22983e469dd7a1eb8e427cb3c585a19d32a3519cfbee8ca62d2fb7b1fc0e4
- MD5 37e5277222fcf07e078cde1bd0d07e89
- SHA1 a8ecb5d1bac3e764e91d4781522b79c94db174a7
- SHA512 2963080b5cfbf870a06c3ac7c15a38f119586738f07d7a704ee80e4ed0b5b9f6251a064637d516d96d67587062d11a8768a4f05cc13e78b02b4633626109725a
- SSDEEP 1572864:tjxVXhf4SG557KaruXc5v6Ar/x1lodZmlKJ7z+ixIuGWCjlinFJUAut:tjPhXG5VKZXc1dxXoTX+ixPFMlTP
- TLSH T1AE183307BC8548A9C0EA9638C9A792527B35BC584B3677DB2E90A7783F377D06C79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_37e5277222fcf07e078cde1bd0d07e89_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_37e5277222fcf07e078cde1bd0d07e89_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_37e5277222fcf07e078cde1bd0d07e89_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 88.0MB
- SHA256 26b22983e469dd7a1eb8e427cb3c585a19d32a3519cfbee8ca62d2fb7b1fc0e4
- MD5 37e5277222fcf07e078cde1bd0d07e89
- SHA1 a8ecb5d1bac3e764e91d4781522b79c94db174a7
- SHA512 2963080b5cfbf870a06c3ac7c15a38f119586738f07d7a704ee80e4ed0b5b9f6251a064637d516d96d67587062d11a8768a4f05cc13e78b02b4633626109725a
- SSDEEP 1572864:tjxVXhf4SG557KaruXc5v6Ar/x1lodZmlKJ7z+ixIuGWCjlinFJUAut:tjPhXG5VKZXc1dxXoTX+ixPFMlTP
- TLSH T1AE183307BC8548A9C0EA9638C9A792527B35BC584B3677DB2E90A7783F377D06C79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger