General
- Target 2026-08-19_a666bb92c7467fb62364cd03a9d8ccf2_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 82.5MB
- Sample260819-ffslpsywew
- SHA256 78fc73478a796131eb88d06acd6e2d97c58a80343dda7d9c299b19dbb997ae75
- MD5 a666bb92c7467fb62364cd03a9d8ccf2
- SHA1 b3387cc4c2c3944dc2a7e879e476ccabdaac0c26
- SHA512 6e00e26b4dbb6d5b13644f2e0e513207903dbc3d7b4c36fad0f6161f8475f76ed14e250c5e29d96f1d8a49956907ebf1e095fec9a9151c308a5e7f7baa6e13ae
- SSDEEP 1572864:wdzhB92qXBh2VE3WFMrcMMqV9R+DyDIXN0JYcEnzznSD9BN9bU:yhXxF3DrcMV9R+FXN0JYcECk
- TLSH T14F183347BC8550A9E5EAE2329865029AB730BC588B313BD72F54E6F41E337E14F36394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_a666bb92c7467fb62364cd03a9d8ccf2_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_a666bb92c7467fb62364cd03a9d8ccf2_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_a666bb92c7467fb62364cd03a9d8ccf2_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 82.5MB
- SHA256 78fc73478a796131eb88d06acd6e2d97c58a80343dda7d9c299b19dbb997ae75
- MD5 a666bb92c7467fb62364cd03a9d8ccf2
- SHA1 b3387cc4c2c3944dc2a7e879e476ccabdaac0c26
- SHA512 6e00e26b4dbb6d5b13644f2e0e513207903dbc3d7b4c36fad0f6161f8475f76ed14e250c5e29d96f1d8a49956907ebf1e095fec9a9151c308a5e7f7baa6e13ae
- SSDEEP 1572864:wdzhB92qXBh2VE3WFMrcMMqV9R+DyDIXN0JYcEnzznSD9BN9bU:yhXxF3DrcMV9R+FXN0JYcECk
- TLSH T14F183347BC8550A9E5EAE2329865029AB730BC588B313BD72F54E6F41E337E14F36394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger