General
- Target 2026-08-17_7e735d6d946a571aebd809af9cfce388_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 89.0MB
- Sample260817-s3rddatzdv
- SHA256 b74b6460b284246151950ca01ed5517d7730cc7d3406930a52185e0932dd27ad
- MD5 7e735d6d946a571aebd809af9cfce388
- SHA1 e519d2adc6021dcd5bb5e99ee9874e2b1c0c3c7d
- SHA512 6ee6af71f6b08fea21a0885fe21cb17b5e8083725e91e43ade5fe8158d17b6f3df117ae4f65f3a91fb164c9b76eeffbe4b20a69921690e15a583fd9bfed7a718
- SSDEEP 1572864:/dJcRu/WdXW1EHHAeBKI8xiT1pm/3BOXypK/ZtIlH18urEbn/IQY82A:VJJONWkgeB4C1YICpKXirEbwa2A
- TLSH T1491833136CA511A9D0AADB35C5B79202BA70FC4D8B3533D32E50BA782EB27C16DB5F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_7e735d6d946a571aebd809af9cfce388_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_7e735d6d946a571aebd809af9cfce388_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_7e735d6d946a571aebd809af9cfce388_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 89.0MB
- SHA256 b74b6460b284246151950ca01ed5517d7730cc7d3406930a52185e0932dd27ad
- MD5 7e735d6d946a571aebd809af9cfce388
- SHA1 e519d2adc6021dcd5bb5e99ee9874e2b1c0c3c7d
- SHA512 6ee6af71f6b08fea21a0885fe21cb17b5e8083725e91e43ade5fe8158d17b6f3df117ae4f65f3a91fb164c9b76eeffbe4b20a69921690e15a583fd9bfed7a718
- SSDEEP 1572864:/dJcRu/WdXW1EHHAeBKI8xiT1pm/3BOXypK/ZtIlH18urEbn/IQY82A:VJJONWkgeB4C1YICpKXirEbwa2A
- TLSH T1491833136CA511A9D0AADB35C5B79202BA70FC4D8B3533D32E50BA782EB27C16DB5F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger