General
- Target 2026-08-19_f87d3a04e492a8e07707db8eb158cd1d_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 87.0MB
- Sample260819-ebadwscg77
- SHA256 130cd45d3496b54a3da0a08c468755817723feceb826d425d318d171cbf9f636
- MD5 f87d3a04e492a8e07707db8eb158cd1d
- SHA1 b0346747f246b9c7fe5b5564f69403743ee49518
- SHA512 c6406b76a3256f6e38c64882c2fee7aebb4d62528cf0a7671568261fc381651eec1c6dcb6d60b50fdcad641a8d1610551a057177d31a935e37334d0fb49dbd3b
- SSDEEP 1572864:ZsCVoWWzrHQPCDa1XF4a+r5kdXm8djvm4UWZA5RFGgGBLatzN2JoiglR00zyP9:sWsUPCDa112qdX7djvA5b42zN6o/r06G
- TLSH T193183307BD9164A5C6EAE2308AB652847230BC9A0F3137D36F50A7B43E737D16E36794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_f87d3a04e492a8e07707db8eb158cd1d_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_f87d3a04e492a8e07707db8eb158cd1d_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_f87d3a04e492a8e07707db8eb158cd1d_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 87.0MB
- SHA256 130cd45d3496b54a3da0a08c468755817723feceb826d425d318d171cbf9f636
- MD5 f87d3a04e492a8e07707db8eb158cd1d
- SHA1 b0346747f246b9c7fe5b5564f69403743ee49518
- SHA512 c6406b76a3256f6e38c64882c2fee7aebb4d62528cf0a7671568261fc381651eec1c6dcb6d60b50fdcad641a8d1610551a057177d31a935e37334d0fb49dbd3b
- SSDEEP 1572864:ZsCVoWWzrHQPCDa1XF4a+r5kdXm8djvm4UWZA5RFGgGBLatzN2JoiglR00zyP9:sWsUPCDa112qdX7djvA5b42zN6o/r06G
- TLSH T193183307BD9164A5C6EAE2308AB652847230BC9A0F3137D36F50A7B43E737D16E36794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger