General
- Target 2026-08-17_5e55d47b71629882dcec4b8a1abfe357_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 91.0MB
- Sample260817-xwp9ysdc76
- SHA256 4a438eaff20ab29fb59490ea5c74bf0f089d26b735902b426bcb716265a0353e
- MD5 5e55d47b71629882dcec4b8a1abfe357
- SHA1 281d30e2c2e507947eef4fe6d82f27c24cd50f9d
- SHA512 09c3f8b74f0ca5e255b9f8807cbd18d0f1e860f74c437ad64f6261479d6acf0ef8d8488da0de7e0adc0cb7857f0e145dcc012b03fe047113693b4b7403fefaad
- SSDEEP 1572864:NmItT5gtcN7jk/Mm7spwqNDATe0PkD5hmIqJg+0z1dcYHwwCS1PmohRAioCrIoCc:N9tVi+HUTe0Pm/mGHHzhRcCrfCyIqSBe
- TLSH T1BB2833237CA655A8C49AE735C4A74362B674FC498B3133D72E60BB382EB63C16D75B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_5e55d47b71629882dcec4b8a1abfe357_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_5e55d47b71629882dcec4b8a1abfe357_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_5e55d47b71629882dcec4b8a1abfe357_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 91.0MB
- SHA256 4a438eaff20ab29fb59490ea5c74bf0f089d26b735902b426bcb716265a0353e
- MD5 5e55d47b71629882dcec4b8a1abfe357
- SHA1 281d30e2c2e507947eef4fe6d82f27c24cd50f9d
- SHA512 09c3f8b74f0ca5e255b9f8807cbd18d0f1e860f74c437ad64f6261479d6acf0ef8d8488da0de7e0adc0cb7857f0e145dcc012b03fe047113693b4b7403fefaad
- SSDEEP 1572864:NmItT5gtcN7jk/Mm7spwqNDATe0PkD5hmIqJg+0z1dcYHwwCS1PmohRAioCrIoCc:N9tVi+HUTe0Pm/mGHHzhRcCrfCyIqSBe
- TLSH T1BB2833237CA655A8C49AE735C4A74362B674FC498B3133D72E60BB382EB63C16D75B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger