General
- Target 2026-08-19_434c46f1e94404d416a278e03b8491de_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 86.5MB
- Sample260819-gl1pyaxglc
- SHA256 71d07862f941b4f241692a56601a16d81b36fafaf6dd9ac16684ea3144023fbe
- MD5 434c46f1e94404d416a278e03b8491de
- SHA1 889ffb5750a0d32a7c1086ca35103b57051b74c8
- SHA512 5c04ae87756464b30c5140561d92ddc5abca11521232fd927b9b0c9a5d8c613b6dd31befc2d7c11e270a2654929c8e20b3ed72b149fda7abaae00dd26a44ba02
- SSDEEP 1572864:w7mq3vl5Xsy+GqldiiWaK+S/fUCC+FA0LqPm/iR68rWphNJBjsZog3b9O/lROan:SmqnUxija3q/C+n/iM8E7sZogkvOo
- TLSH T10C183343BC8461A9DAAAD2318A658665B730BC5847313BD72F54E7B02F337E61F39B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_434c46f1e94404d416a278e03b8491de_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_434c46f1e94404d416a278e03b8491de_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_434c46f1e94404d416a278e03b8491de_cobalt-strike_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 86.5MB
- SHA256 71d07862f941b4f241692a56601a16d81b36fafaf6dd9ac16684ea3144023fbe
- MD5 434c46f1e94404d416a278e03b8491de
- SHA1 889ffb5750a0d32a7c1086ca35103b57051b74c8
- SHA512 5c04ae87756464b30c5140561d92ddc5abca11521232fd927b9b0c9a5d8c613b6dd31befc2d7c11e270a2654929c8e20b3ed72b149fda7abaae00dd26a44ba02
- SSDEEP 1572864:w7mq3vl5Xsy+GqldiiWaK+S/fUCC+FA0LqPm/iR68rWphNJBjsZog3b9O/lROan:SmqnUxija3q/C+n/iM8E7sZogkvOo
- TLSH T10C183343BC8461A9DAAAD2318A658665B730BC5847313BD72F54E7B02F337E61F39B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger