General
- Target 2026-08-17_a3d7fd8fa22f29c2323b7e3b71b30089_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 97.3MB
- Sample260818-acn68ascpg
- SHA256 16bce0bfc61b43027c7372e3eed18ef6a05148dca3c66135e9cd4ad76ca09b1c
- MD5 a3d7fd8fa22f29c2323b7e3b71b30089
- SHA1 9efadcd5eb0ac2a15f0f16318ed44799987057ff
- SHA512 b5519856ba1acf5ce8c9499b78a491543e37ac2526745630d5e8a6d229d62575deba5837025841f83f1eea40e12cd8a94f5788981c641c25b7241cc43d4ac23e
- SSDEEP 1572864:BlfgnrMKP49lNPdFxVZtTAyo/e6E6T9boGy7t8akZc1JHxeTsDe5GXU676Un:Bl44KazbxF6et29bPyBkEDeGXU6uUn
- TLSH T16E283307FC9284A9C496EA3089B3A2527B74BC494B3137E32E50FB782FB67D05976744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_a3d7fd8fa22f29c2323b7e3b71b30089_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_a3d7fd8fa22f29c2323b7e3b71b30089_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_a3d7fd8fa22f29c2323b7e3b71b30089_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 97.3MB
- SHA256 16bce0bfc61b43027c7372e3eed18ef6a05148dca3c66135e9cd4ad76ca09b1c
- MD5 a3d7fd8fa22f29c2323b7e3b71b30089
- SHA1 9efadcd5eb0ac2a15f0f16318ed44799987057ff
- SHA512 b5519856ba1acf5ce8c9499b78a491543e37ac2526745630d5e8a6d229d62575deba5837025841f83f1eea40e12cd8a94f5788981c641c25b7241cc43d4ac23e
- SSDEEP 1572864:BlfgnrMKP49lNPdFxVZtTAyo/e6E6T9boGy7t8akZc1JHxeTsDe5GXU676Un:Bl44KazbxF6et29bPyBkEDeGXU6uUn
- TLSH T16E283307FC9284A9C496EA3089B3A2527B74BC494B3137E32E50FB782FB67D05976744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger