General
- Target 2026-08-19_ca25eaa293a172730d088d1664cacbca_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 89.3MB
- Sample260819-ezyrdswfpf
- SHA256 3667f1264541af187b875e736d608e87a78fc9c255e8ecb4bc873f3839668c9c
- MD5 ca25eaa293a172730d088d1664cacbca
- SHA1 392d9d0b40f553214e386d09cfd92895930b0006
- SHA512 2029c4d8397f338c6062aba77b412fb865fb3a8d09d5c601cf1506146fef70834d51311b2bdcb4ce5d97999e2bc806ae0397479309eae475e4b3e63865463721
- SSDEEP 1572864:hRE690Q+Mzs3FeNs7KgxxI1MFB/KE2vg+f0UazEgfsG4A5/7MxQ1+lpNX:k69FM3F0sbAs/Avg+f0TAgfsvK7QQ4l
- TLSH T15E283307BD9145A9C4A6AB348AB35252BB747C49873223E32E60EB783FB77D05D76700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ca25eaa293a172730d088d1664cacbca_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ca25eaa293a172730d088d1664cacbca_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ca25eaa293a172730d088d1664cacbca_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 89.3MB
- SHA256 3667f1264541af187b875e736d608e87a78fc9c255e8ecb4bc873f3839668c9c
- MD5 ca25eaa293a172730d088d1664cacbca
- SHA1 392d9d0b40f553214e386d09cfd92895930b0006
- SHA512 2029c4d8397f338c6062aba77b412fb865fb3a8d09d5c601cf1506146fef70834d51311b2bdcb4ce5d97999e2bc806ae0397479309eae475e4b3e63865463721
- SSDEEP 1572864:hRE690Q+Mzs3FeNs7KgxxI1MFB/KE2vg+f0UazEgfsG4A5/7MxQ1+lpNX:k69FM3F0sbAs/Avg+f0TAgfsvK7QQ4l
- TLSH T15E283307BD9145A9C4A6AB348AB35252BB747C49873223E32E60EB783FB77D05D76700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger