General
- Target 2026-08-19_10c0fb6f47dbef4ccd0dd204149b793f_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 92.3MB
- Sample260819-g9ht2azzaz
- SHA256 5763482306f75c51ad3cb1f1ebf289712464ced75f254f357c97c042d647d11e
- MD5 10c0fb6f47dbef4ccd0dd204149b793f
- SHA1 ef4a6ccb175dc2c126c3ba8ad42ce1f671cdea2c
- SHA512 fc424dafed1c6ad8abd407cef7064789f93066c44a21e451feb2541e36ed2e88c5e6b1a682203aacf400c5c710bb331110756e97f442588ca097e3d0e1773dfc
- SSDEEP 1572864:hRifzcVMZBz+Tc/3nc6NDsZTYkNZuJa8wNox2TX/xQyKcrrkNTL:CfzcV96w8kNZuo8wQqvxQNSrk9
- TLSH T117283307FC9545A9C4AAAB348AB36292B774B849473223D32E50FB382FB77E45D35740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_10c0fb6f47dbef4ccd0dd204149b793f_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_10c0fb6f47dbef4ccd0dd204149b793f_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_10c0fb6f47dbef4ccd0dd204149b793f_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 92.3MB
- SHA256 5763482306f75c51ad3cb1f1ebf289712464ced75f254f357c97c042d647d11e
- MD5 10c0fb6f47dbef4ccd0dd204149b793f
- SHA1 ef4a6ccb175dc2c126c3ba8ad42ce1f671cdea2c
- SHA512 fc424dafed1c6ad8abd407cef7064789f93066c44a21e451feb2541e36ed2e88c5e6b1a682203aacf400c5c710bb331110756e97f442588ca097e3d0e1773dfc
- SSDEEP 1572864:hRifzcVMZBz+Tc/3nc6NDsZTYkNZuJa8wNox2TX/xQyKcrrkNTL:CfzcV96w8kNZuo8wQqvxQNSrk9
- TLSH T117283307FC9545A9C4AAAB348AB36292B774B849473223D32E50FB382FB77E45D35740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger