General
- Target 2026-08-18_a67ffe56f411f41b245b3e9738e36d2f_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 94.2MB
- Sample260818-fg66gswena
- SHA256 beed9ed915e513a8bd024f3dd614e79060827866aebf42b552db6a574a239785
- MD5 a67ffe56f411f41b245b3e9738e36d2f
- SHA1 3545dceff8f47d0351b84188c16a9594e66be2ea
- SHA512 cf1644a57ff5281ce202dbf8d4319c8cdde458ead982507680149b738005d3c0e93f0ba76c01bbed33cac1501d5398dec8dc39a16d3baffb382b9f787108017d
- SSDEEP 1572864:zVDeIPiiYsOmGO45Cswvzl2qJXGYxIcVJTjacqcFZyFU2c8VEa9C03YE1Oi:MAfOYdzltWYTVVaAyF7csV3x
- TLSH T1BE283303FDA105A9C4A99639C5BB53427B38B8488B3037E72E50B6783F76BC16E79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_a67ffe56f411f41b245b3e9738e36d2f_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_a67ffe56f411f41b245b3e9738e36d2f_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_a67ffe56f411f41b245b3e9738e36d2f_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 94.2MB
- SHA256 beed9ed915e513a8bd024f3dd614e79060827866aebf42b552db6a574a239785
- MD5 a67ffe56f411f41b245b3e9738e36d2f
- SHA1 3545dceff8f47d0351b84188c16a9594e66be2ea
- SHA512 cf1644a57ff5281ce202dbf8d4319c8cdde458ead982507680149b738005d3c0e93f0ba76c01bbed33cac1501d5398dec8dc39a16d3baffb382b9f787108017d
- SSDEEP 1572864:zVDeIPiiYsOmGO45Cswvzl2qJXGYxIcVJTjacqcFZyFU2c8VEa9C03YE1Oi:MAfOYdzltWYTVVaAyF7csV3x
- TLSH T1BE283303FDA105A9C4A99639C5BB53427B38B8488B3037E72E50B6783F76BC16E79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger