General
- Target 2026-08-17_6d792749d6b849b2b09fa96396a1c64a_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 96.0MB
- Sample260817-s7mkzsterc
- SHA256 aefbc3f1f1357ed71f62d736747032a42cb6e5eff01ba0f6eb2b117e31156d71
- MD5 6d792749d6b849b2b09fa96396a1c64a
- SHA1 796ea06abe7823f71231e6612fde4d9b92b4062d
- SHA512 82f6f9e54eb1d736a5e854c85f7848e7662bd30df823b1e7efc35d05d96fe72ea449007112fd168e8a5c12132a7e671504b1555ed0be0861ab5c0cdd915f0ab8
- SSDEEP 1572864:/dkc//Bb9+ZsYMNnmQmp1Re6DQTeS4MMmCxcTHlfOfrHfTVDjooJScDi8bLcqFID:VJ/jmGgxielTxcblf0EXcTbLcqFU
- TLSH T1AE2833237C6515A5C4A6EB36C4B79212BA34BC49873633E72E40FA742EB23C15E76F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_6d792749d6b849b2b09fa96396a1c64a_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_6d792749d6b849b2b09fa96396a1c64a_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_6d792749d6b849b2b09fa96396a1c64a_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 96.0MB
- SHA256 aefbc3f1f1357ed71f62d736747032a42cb6e5eff01ba0f6eb2b117e31156d71
- MD5 6d792749d6b849b2b09fa96396a1c64a
- SHA1 796ea06abe7823f71231e6612fde4d9b92b4062d
- SHA512 82f6f9e54eb1d736a5e854c85f7848e7662bd30df823b1e7efc35d05d96fe72ea449007112fd168e8a5c12132a7e671504b1555ed0be0861ab5c0cdd915f0ab8
- SSDEEP 1572864:/dkc//Bb9+ZsYMNnmQmp1Re6DQTeS4MMmCxcTHlfOfrHfTVDjooJScDi8bLcqFID:VJ/jmGgxielTxcblf0EXcTbLcqFU
- TLSH T1AE2833237C6515A5C4A6EB36C4B79212BA34BC49873633E72E40FA742EB23C15E76F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger