General
- Target 2026-08-19_d60a4060c5950a86b4642280cc792d81_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 95.3MB
- Sample260819-etefkadm3x
- SHA256 211909a11ff90c672e319bfc5cffb47f04c66e6dc98f164a474e048f60a6aa1c
- MD5 d60a4060c5950a86b4642280cc792d81
- SHA1 5b52bf373d364118f7fb74b38e5a1d6ae2aca712
- SHA512 b2e4762f3c3cc23e6670a4db52e18bbda68485d7ad0ce707349d6a495f69ff759c3d462425cb54d0e55ce716a52555d75e9aa797a1a5e769a0cd77261dfcab1d
- SSDEEP 1572864:hRDqqmDa5uvlIFuE/wm5JsGaTmjmqnGEzNqgurUKr9tU7fAKcwOamDNTAvT:e/DaEtIFzLX5jmqGEzNqgHKrDv1wBmDa
- TLSH T191283307FD9640A9C4A6AB34C5B356937B34B848473263E32E60AB783FB77E05976740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_d60a4060c5950a86b4642280cc792d81_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_d60a4060c5950a86b4642280cc792d81_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_d60a4060c5950a86b4642280cc792d81_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 95.3MB
- SHA256 211909a11ff90c672e319bfc5cffb47f04c66e6dc98f164a474e048f60a6aa1c
- MD5 d60a4060c5950a86b4642280cc792d81
- SHA1 5b52bf373d364118f7fb74b38e5a1d6ae2aca712
- SHA512 b2e4762f3c3cc23e6670a4db52e18bbda68485d7ad0ce707349d6a495f69ff759c3d462425cb54d0e55ce716a52555d75e9aa797a1a5e769a0cd77261dfcab1d
- SSDEEP 1572864:hRDqqmDa5uvlIFuE/wm5JsGaTmjmqnGEzNqgurUKr9tU7fAKcwOamDNTAvT:e/DaEtIFzLX5jmqGEzNqgHKrDv1wBmDa
- TLSH T191283307FD9640A9C4A6AB34C5B356937B34B848473263E32E60AB783FB77E05976740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger