General
- Target 2026-08-18_d78e522f0a145083cb2cb7b3c856aeef_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 89.3MB
- Sample260818-fd62bafd54
- SHA256 b241a6fe1f52476ff930693d594730434bcee8854c29ea7ed141b0bae0a7013f
- MD5 d78e522f0a145083cb2cb7b3c856aeef
- SHA1 75bd3a05adebc5f714f7af86f1abe3155763d196
- SHA512 45505d6ecb6a73cc69d7cc2e60cfe902f9f5a63592cb5ca223cd2de4fb118b37459fa6e720231a124d075c6af0401706a8b543350dfa42a9782ec2e04bf4d9b6
- SSDEEP 1572864:BRegnpMpwuRQe1ho2p2VyFDMxPaDOyu7Ow6qRe3Jdcxs8tXqqiuUgTimupFxk+he:BRespMpwmhT2VyFAJEOyu7V45dExdqqT
- TLSH T19E283307FCE188A8C0DAA631C9B3A6937B387C494B3127E32E50AB782F767D05975754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_d78e522f0a145083cb2cb7b3c856aeef_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_d78e522f0a145083cb2cb7b3c856aeef_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_d78e522f0a145083cb2cb7b3c856aeef_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 89.3MB
- SHA256 b241a6fe1f52476ff930693d594730434bcee8854c29ea7ed141b0bae0a7013f
- MD5 d78e522f0a145083cb2cb7b3c856aeef
- SHA1 75bd3a05adebc5f714f7af86f1abe3155763d196
- SHA512 45505d6ecb6a73cc69d7cc2e60cfe902f9f5a63592cb5ca223cd2de4fb118b37459fa6e720231a124d075c6af0401706a8b543350dfa42a9782ec2e04bf4d9b6
- SSDEEP 1572864:BRegnpMpwuRQe1ho2p2VyFDMxPaDOyu7Ow6qRe3Jdcxs8tXqqiuUgTimupFxk+he:BRespMpwmhT2VyFAJEOyu7V45dExdqqT
- TLSH T19E283307FCE188A8C0DAA631C9B3A6937B387C494B3127E32E50AB782F767D05975754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger