General
- Target 2026-08-17_015defff11d9edaf102136539d7f1ca1_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 92.0MB
- Sample260817-tygh2svbra
- SHA256 d7a4906891e8fe9f6610ca939cbce3bcff7b49618cb7fcbf66845c4fd947b09c
- MD5 015defff11d9edaf102136539d7f1ca1
- SHA1 71a69b40af8576af2406b8a3824f9c8cf9e48418
- SHA512 77b202532919dbc525ddad4e965fff6e90fa3ecb2505624044855c43f25fb7cf6b7d6b5f65271e384e80d52a9d3d4264d23b41ccfe2f5107a797bb42b048ec57
- SSDEEP 1572864:/dZo9+7gqYs+2zZzRNhh1U28Aip9jGISMYFrvjzGeEY+JW+WHeS4odW8kKdgzvn0:VZ/gTs++927Djv1YFfzGLJW+WuoNcPIp
- TLSH T1FA2833136DA551A9C4A6EB31C4778242B674FC098B3133E72E40BA742FB67C16EB5F48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_015defff11d9edaf102136539d7f1ca1_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_015defff11d9edaf102136539d7f1ca1_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_015defff11d9edaf102136539d7f1ca1_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 92.0MB
- SHA256 d7a4906891e8fe9f6610ca939cbce3bcff7b49618cb7fcbf66845c4fd947b09c
- MD5 015defff11d9edaf102136539d7f1ca1
- SHA1 71a69b40af8576af2406b8a3824f9c8cf9e48418
- SHA512 77b202532919dbc525ddad4e965fff6e90fa3ecb2505624044855c43f25fb7cf6b7d6b5f65271e384e80d52a9d3d4264d23b41ccfe2f5107a797bb42b048ec57
- SSDEEP 1572864:/dZo9+7gqYs+2zZzRNhh1U28Aip9jGISMYFrvjzGeEY+JW+WHeS4odW8kKdgzvn0:VZ/gTs++927Djv1YFfzGLJW+WuoNcPIp
- TLSH T1FA2833136DA551A9C4A6EB31C4778242B674FC098B3133E72E40BA742FB67C16EB5F48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger