95c6e890671de29edfe2eb6608ca499fe600f4fc4b807aaf3baf91dfb2b96e2b

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 06:32

Target
2026-08-19_0db0c564cd09313377dc31e6e6b69b5e_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Size 3.4MB
Sample260819-ha5eeszzcs
SHA256 95c6e890671de29edfe2eb6608ca499fe600f4fc4b807aaf3baf91dfb2b96e2b
MD5 0db0c564cd09313377dc31e6e6b69b5e
SHA1 488eac9bbdbbc9873e3f817150cbe5766c54ef61
SHA512 f679791b1831d07f6f815bc2496ee4815abf3d7a912ced6a8820a9bb4c2cfc6faab3e350d8245f17460ab97991686f6915aa166a1e83d4dcdace74cdab2d3ff3
SSDEEP 49152:r/dS8sPv9mj+LeIw3CCgrLGRf7Miph+fNS4fuvi7rRVLMw1FKn+o:5CBE6fl7rwci
TLSH
T19BF59D47BCD548BAC4A9A331C9A292927A72BC490F3267C72E50F77D2FB6BD05935340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
4488	2026-08-19_0db0c564cd09313377dc31e6e6b69b5e_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-19_0db0c564cd09313377dc31e6e6b69b5e_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_0db0c564cd09313377dc31e6e6b69b5e_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4488