General
- Target 2026-08-17_c0ff60c65c206a87f4804cc71ba21917_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 96.0MB
- Sample260817-sh9dfsshlg
- SHA256 f2298f67ad4c10e5e4de81a59a5aaf4004c7e47ba542f415fad6079a1de14097
- MD5 c0ff60c65c206a87f4804cc71ba21917
- SHA1 a9a8deb72ed0b24f233e867ce38ff87333bead11
- SHA512 b0271b5e688781843393aa5c90c45711d36941315ad47797b23e1ad7467fe8b538ec51a26dc186accebc51de50a725bdf4499ca9c16fdba12889b3b0ba4f6156
- SSDEEP 3145728:N9t+kwgoaTTT1Qm5HY1/iE7zS7GBUVSwQ7SY:N9IxBaXTOm5Hw/PsGech
- TLSH T1892833237DA551A8C49AE735C5B75262BA64FC488B3133D31E60FB382EB27C05DB6B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_c0ff60c65c206a87f4804cc71ba21917_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_c0ff60c65c206a87f4804cc71ba21917_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c0ff60c65c206a87f4804cc71ba21917_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 96.0MB
- SHA256 f2298f67ad4c10e5e4de81a59a5aaf4004c7e47ba542f415fad6079a1de14097
- MD5 c0ff60c65c206a87f4804cc71ba21917
- SHA1 a9a8deb72ed0b24f233e867ce38ff87333bead11
- SHA512 b0271b5e688781843393aa5c90c45711d36941315ad47797b23e1ad7467fe8b538ec51a26dc186accebc51de50a725bdf4499ca9c16fdba12889b3b0ba4f6156
- SSDEEP 3145728:N9t+kwgoaTTT1Qm5HY1/iE7zS7GBUVSwQ7SY:N9IxBaXTOm5Hw/PsGech
- TLSH T1892833237DA551A8C49AE735C5B75262BA64FC488B3133D31E60FB382EB27C05DB6B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger