General
- Target 2026-08-17_18c3a7153dc2f8f61733ae70221ea1e2_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 93.0MB
- Sample260817-2p47raeb42
- SHA256 0521c8f28a169ebe262c4ade667d2625a0fc325ee0859ca0516f1d2d8b98ec5e
- MD5 18c3a7153dc2f8f61733ae70221ea1e2
- SHA1 9fd42a6fd875efb37ce936bba22fd484a45402b2
- SHA512 f787c55c0df19e26c9e36fad90d329339a32ce3dac8461e3ee7765438a5c4be42551255679789d3ac007a4e652fd93e32207880f837dfc8bb83760299b8fc875
- SSDEEP 1572864:/dqv79Zo3i2mQMiiSYx0pimeTuTVLSmraXOZ4/ne/TydvvLmU0s:VYh63i2uiiSqP4SNDwTuvBd
- TLSH T1C22833236D6641A9C496E736C4B282127664FC498B3533E32E50FB782FB27D0AD76F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_18c3a7153dc2f8f61733ae70221ea1e2_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_18c3a7153dc2f8f61733ae70221ea1e2_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_18c3a7153dc2f8f61733ae70221ea1e2_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 93.0MB
- SHA256 0521c8f28a169ebe262c4ade667d2625a0fc325ee0859ca0516f1d2d8b98ec5e
- MD5 18c3a7153dc2f8f61733ae70221ea1e2
- SHA1 9fd42a6fd875efb37ce936bba22fd484a45402b2
- SHA512 f787c55c0df19e26c9e36fad90d329339a32ce3dac8461e3ee7765438a5c4be42551255679789d3ac007a4e652fd93e32207880f837dfc8bb83760299b8fc875
- SSDEEP 1572864:/dqv79Zo3i2mQMiiSYx0pimeTuTVLSmraXOZ4/ne/TydvvLmU0s:VYh63i2uiiSqP4SNDwTuvBd
- TLSH T1C22833236D6641A9C496E736C4B282127664FC498B3533E32E50FB782FB27D0AD76F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger