General
- Target 2026-08-19_b503ad7954081dd3dc47f3dd21e15681_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_ponmocup_salatstealer_sliver
- Size 92.2MB
- Sample260819-e82veadn9s
- SHA256 147975df8f184803746f162c376e8793b085b351821eb52de9ab7e6dae449b85
- MD5 b503ad7954081dd3dc47f3dd21e15681
- SHA1 2a30412f3c2237925b03bf2f86e4ba000984abba
- SHA512 51cb0bf1916377d8d17a2f993ddffeeb185076402dfe645cfe886ec3fe88058a1f0d6a2b985daf7407ea9e3a952591a67f49417c17056035c78da622f22af693
- SSDEEP 1572864:zVDeytv7qvwzGsULwUzibzsI+FXXB+uuIPv77jwODToUHIgv51JvxQC8C+0XFaM:MMvABLCoRR+2bRI+51JJcmXAM
- TLSH T18E283303FC9505AAC4AA9639C5B757427B38BC498B3027E72E50B6383F76BC1AD79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_b503ad7954081dd3dc47f3dd21e15681_frostygoop_ghostlocker_glassworm_hive_knight_luca-steale.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_b503ad7954081dd3dc47f3dd21e15681_frostygoop_ghostlocker_glassworm_hive_knight_luca-steale.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_b503ad7954081dd3dc47f3dd21e15681_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_ponmocup_salatstealer_sliver
- Size 92.2MB
- SHA256 147975df8f184803746f162c376e8793b085b351821eb52de9ab7e6dae449b85
- MD5 b503ad7954081dd3dc47f3dd21e15681
- SHA1 2a30412f3c2237925b03bf2f86e4ba000984abba
- SHA512 51cb0bf1916377d8d17a2f993ddffeeb185076402dfe645cfe886ec3fe88058a1f0d6a2b985daf7407ea9e3a952591a67f49417c17056035c78da622f22af693
- SSDEEP 1572864:zVDeytv7qvwzGsULwUzibzsI+FXXB+uuIPv77jwODToUHIgv51JvxQC8C+0XFaM:MMvABLCoRR+2bRI+51JJcmXAM
- TLSH T18E283303FC9505AAC4AA9639C5B757427B38BC498B3027E72E50B6383F76BC1AD79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger