General
- Target 2026-08-17_c8fa5680ff9cfac98f1edc3dd318df8d_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 97.3MB
- Sample260817-jlehtawbnd
- SHA256 e3935c4b95a1cbb36a5f9d5040e87a98a7fb4493689a04065f8128408c493dc9
- MD5 c8fa5680ff9cfac98f1edc3dd318df8d
- SHA1 f7b220cbcd497cfa50aee15a371b450d2de6b399
- SHA512 6bcc33ea133a6cc06e1619d51f0d92aadb7e0fcc28e0ea88d538abbafd249f85e45ded309f3a267841d91fb5bc4247fb268aee8b8e20d222a9aea2eb22d8b745
- SSDEEP 1572864:BXgbSVBtbjTOIrQ+3Siq3b1pZjqrjOfVM9BAwFlDvyPvyffTDVd6dRIkie4CozZB:xCS3tnVEq+69B5ynyffTzsiki34BYnP
- TLSH T10C283303BDA588A8C4EA973189B392627774B8494B3573D32E51BB383F767E05E39740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_c8fa5680ff9cfac98f1edc3dd318df8d_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_c8fa5680ff9cfac98f1edc3dd318df8d_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c8fa5680ff9cfac98f1edc3dd318df8d_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 97.3MB
- SHA256 e3935c4b95a1cbb36a5f9d5040e87a98a7fb4493689a04065f8128408c493dc9
- MD5 c8fa5680ff9cfac98f1edc3dd318df8d
- SHA1 f7b220cbcd497cfa50aee15a371b450d2de6b399
- SHA512 6bcc33ea133a6cc06e1619d51f0d92aadb7e0fcc28e0ea88d538abbafd249f85e45ded309f3a267841d91fb5bc4247fb268aee8b8e20d222a9aea2eb22d8b745
- SSDEEP 1572864:BXgbSVBtbjTOIrQ+3Siq3b1pZjqrjOfVM9BAwFlDvyPvyffTDVd6dRIkie4CozZB:xCS3tnVEq+69B5ynyffTzsiki34BYnP
- TLSH T10C283303BDA588A8C4EA973189B392627774B8494B3573D32E51BB383F767E05E39740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger