General
- Target 2026-08-17_e662d8cf76b83aa5ad4d522b58cf0a00_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 93.1MB
- Sample260817-pm9cgabd66
- SHA256 9198cf78a2490df719a694a02ea432a4387fe2a3124e5f20165b7a07a066265d
- MD5 e662d8cf76b83aa5ad4d522b58cf0a00
- SHA1 d3e276f1c55e70511dedcd11e2cedb1340fc1c92
- SHA512 e5af326ef08d17b2f11054c4629dcb092073e7a964721ead66d0ba91f8800e6e51b8b4c30c441b27646a7267126ec141b83f9aead14ed68ecceb8c2fe23a0575
- SSDEEP 1572864:5clQ2eIPIjVIanQci2eD9p5l9ZXmBs2A23mAira3WFstV9J6HDWWmpP:u22eiIjVheD9pHzmdOA0amFEV9sDGpP
- TLSH T11D283317A99501A9D496AB3894BB83627F34BC48833537E32EA1BE783F717D16D39700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_e662d8cf76b83aa5ad4d522b58cf0a00_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_e662d8cf76b83aa5ad4d522b58cf0a00_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_e662d8cf76b83aa5ad4d522b58cf0a00_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 93.1MB
- SHA256 9198cf78a2490df719a694a02ea432a4387fe2a3124e5f20165b7a07a066265d
- MD5 e662d8cf76b83aa5ad4d522b58cf0a00
- SHA1 d3e276f1c55e70511dedcd11e2cedb1340fc1c92
- SHA512 e5af326ef08d17b2f11054c4629dcb092073e7a964721ead66d0ba91f8800e6e51b8b4c30c441b27646a7267126ec141b83f9aead14ed68ecceb8c2fe23a0575
- SSDEEP 1572864:5clQ2eIPIjVIanQci2eD9p5l9ZXmBs2A23mAira3WFstV9J6HDWWmpP:u22eiIjVheD9pHzmdOA0amFEV9sDGpP
- TLSH T11D283317A99501A9D496AB3894BB83627F34BC48833537E32EA1BE783F717D16D39700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger