General
- Target 2026-08-19_d7c8b856c0cc588a8a7e9ea8228e5de9_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 88.4MB
- Sample260819-esfx1aweph
- SHA256 46cc026786c8735e0e1ffd2fea86c6b59a659256752afce87b3429ecb8172546
- MD5 d7c8b856c0cc588a8a7e9ea8228e5de9
- SHA1 6c02ddee05f91cbe24c9906cfb4f99ca42db247f
- SHA512 ba64a7f09381e29e8b74c869cbee11e5d88e0e06c21afdde68a78070344201d7d3608b6c9f5b9b2f4a973f89766c0cf0eaebef05a2ec7bcc53e787939283c5f5
- SSDEEP 1572864:BnzAf87SdD/rton7Ki0oeK6Mh9PjBV8WkXqk0d2qRbic17bFapctcsOF:lc9UnEK6Mh9X8h0d2q5/7qsOF
- TLSH T148183317BD9144A8C4AAE735C9B75652BB34B8494B3137E32E60B7382E777C09E79B00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_d7c8b856c0cc588a8a7e9ea8228e5de9_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_d7c8b856c0cc588a8a7e9ea8228e5de9_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_d7c8b856c0cc588a8a7e9ea8228e5de9_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 88.4MB
- SHA256 46cc026786c8735e0e1ffd2fea86c6b59a659256752afce87b3429ecb8172546
- MD5 d7c8b856c0cc588a8a7e9ea8228e5de9
- SHA1 6c02ddee05f91cbe24c9906cfb4f99ca42db247f
- SHA512 ba64a7f09381e29e8b74c869cbee11e5d88e0e06c21afdde68a78070344201d7d3608b6c9f5b9b2f4a973f89766c0cf0eaebef05a2ec7bcc53e787939283c5f5
- SSDEEP 1572864:BnzAf87SdD/rton7Ki0oeK6Mh9PjBV8WkXqk0d2qRbic17bFapctcsOF:lc9UnEK6Mh9X8h0d2q5/7qsOF
- TLSH T148183317BD9144A8C4AAE735C9B75652BB34B8494B3137E32E60B7382E777C09E79B00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger