General
- Target 2026-08-19_b2dfd44353b2cf600004824de2d04a00_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 96.0MB
- Sample260819-e96jzswhmb
- SHA256 21adebd584be9078b33b1a264a3a8fc488dcf07ac44c4b7388c0c84f13265fd5
- MD5 b2dfd44353b2cf600004824de2d04a00
- SHA1 c73c2b2b553f95f6884af09580caa2e5d157b56e
- SHA512 79aac737b94064b2b3419e84f4e44661f3ccff401b1461e7b2038ad6cb663dbf1c30e992d4130ed1e4d65a036787701ddfbdc9df1a3a3b83fc0f93659c45dcf0
- SSDEEP 1572864:tT13IqgwWOZnHVi7T+Ax/AbJmCvUJ48Kj3MKWf8c5HpKcT23RvlmMvwioX6iGq13:tTxIXwWcYebvb8KovFJI3RdmMVoXVGqJ
- TLSH T124283347BC9649A5D0EA9638C9B782137B35BC584B3237EB2E90A7743E367C05DB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_b2dfd44353b2cf600004824de2d04a00_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_b2dfd44353b2cf600004824de2d04a00_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_b2dfd44353b2cf600004824de2d04a00_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 96.0MB
- SHA256 21adebd584be9078b33b1a264a3a8fc488dcf07ac44c4b7388c0c84f13265fd5
- MD5 b2dfd44353b2cf600004824de2d04a00
- SHA1 c73c2b2b553f95f6884af09580caa2e5d157b56e
- SHA512 79aac737b94064b2b3419e84f4e44661f3ccff401b1461e7b2038ad6cb663dbf1c30e992d4130ed1e4d65a036787701ddfbdc9df1a3a3b83fc0f93659c45dcf0
- SSDEEP 1572864:tT13IqgwWOZnHVi7T+Ax/AbJmCvUJ48Kj3MKWf8c5HpKcT23RvlmMvwioX6iGq13:tTxIXwWcYebvb8KovFJI3RdmMVoXVGqJ
- TLSH T124283347BC9649A5D0EA9638C9B782137B35BC584B3237EB2E90A7743E367C05DB9700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger