a0cfc5c92a9e00d722000c06396314bd8a60575cd33ca84e6a868a9f2fad0238

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 01:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-19_4e78c946088af49a69079c1f59b13315_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Size 2.7MB
Sample260820-b7z3msdk6v
SHA256 a0cfc5c92a9e00d722000c06396314bd8a60575cd33ca84e6a868a9f2fad0238
MD5 4e78c946088af49a69079c1f59b13315
SHA1 d94a5d772cdb4c5b109467656a566d286ad67fa9
SHA512 30fbb865fd42fc51f6aa98b78823e5f4f6de4239133c2141df6d4ef5418b9c9e912c4e3af30f69e4dbbc9def08bfbdab3f7659c1c8985c6343abb470255dd78d
SSDEEP 24576:1xCCayeFt17Y8SEW/6OjG+ScMLyhWUwRGFkuiUmDLFsGPUZYT1dwivCJlUvq27tO:1sDHD7iEW/DqX7yhOG9uwiqcRvOHE
TLSH
T12BD52817FCA444A5C0AEA235C96692537B71BC491B3123D33A60BB782F77BD4ADB9700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
1492	notepad.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5056 wrote to memory of 1492	5056	2026-08-19_4e78c946088af49a69079c1f59b13315_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe	90

C:\Users\Admin\AppData\Local\Temp\2026-08-19_4e78c946088af49a69079c1f59b13315_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_4e78c946088af49a69079c1f59b13315_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5056
- C:\Windows\system32\notepad.exe
  notepad.exe C:\Users\Admin\AppData\Local\Temp\Browser_Activity_Report.txt
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:1492

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Path C:\Users\Admin\AppData\Local\Temp\BrowserCheckerDB-1094512290\Cookies
Size 20KB
SHA256 2ade7ad8f15eccb025798893f007bc3a04679504411bbad75e4d1f35cf47a65e
MD5 40c4021f7a23fc1b361904d0519eb714
SHA1 eb811f03ded3cf26dc320980307be2b2f9335df5
SHA512 6cfd57cdb92272641c9ad007872cf25c11579c5bfd44935b988559b5e0cca1f4eff976265ff2c2b002f5176af6c8c21961f58e8fb108fcedf4370f9d640186ff
SSDEEP 24:TLf91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fB:T79aw/aHLopFMavU1iB
TLSH
T1B392AD8E1F343620C0F44B33F9C249972E7C212C93637A89EE5410F3DD965ABF50A5A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\BrowserCheckerDB-1628524418\History
Size 224KB
SHA256 c3fdefb2695fb97fee8d51eeeb8a15a6b72c78b2df96cf7e72d22f48f47898b7
MD5 c9a28ee514185f3bc2afc3279fa21c78
SHA1 de08930612cd54bce969bac69fec95e6f59108d3
SHA512 79abbf0fb34956d1996cc3a267e4bfd35db71bed1b470ff70a2c0b04c461fd328e6962b370cdb0a97a25bc3a29f20c3e3ea70ce00237eef04d523852aa49ffbe
SSDEEP 96:bmTFtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/9bbEOVpZf24JkMfXSFR+CFqrn:bNH+bF+UI3iWGVoWN3qL/9VVV63
TLSH
T1B324EE4E5F343722CDBD913668E644A35C7CF03F8B5366DA686114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\BrowserCheckerDB-1943647260\History
Size 160KB
SHA256 9091ac11406f559b228639a023f638aa4461083cf4151878f781b85acde0e2ba
MD5 ea2f1147ca310fa5d8e3dc3cca218f60
SHA1 fd7e6239dac6d57876fc8536feb7bbf2307b0bc1
SHA512 7427e2055015af3721dfaa2f3e16dd12b158dfa3ea8c75130bd66a6610b657d51a5d7fad8c1f2e27e79ba05bdfef1e961171611c2668759bc09dd79cb97cbc9b
SSDEEP 96:JY/uejzH+bF+UIYysX0fxQp97YEHt/DfLcLq2piRk/E0:JY/tH+bF+UI3iWGVYWNkqp3
TLSH
T14AF30A1E5F243312CDBD92366CE745B3597CF03F8B632A856CA514B1CEE2652A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookies.sqlite

Path C:\Users\Admin\AppData\Local\Temp\BrowserCheckerDB-2276492941\cookies.sqlite
Size 96KB
SHA256 33a2357af8dc03cc22d2b7ce5c90abf25ac8b40223155a516f1a8df4acbf2a53
MD5 6066c07e98c96795ecd876aa92fe10f8
SHA1 f73cbd7b307c53aaae38677d6513b1baa729ac9f
SHA512 7d76207c1c6334aa98f79c325118adf03a5ba36b1e2412803fd3e654a9d3630c775f32a98855c46342eba00d4a8496a3ded3686e74beaac9c216beee37aa5cb7
SSDEEP 12:DQnD+23Fmdmc/OPVJXfPNn43etRRfYR5O8atLwxeYaNcDakMG/lO:DQnS232mNVpP965RayKN0MG/lO
TLSH
T192A3DD826B781395C44701B2FCB0565E0D3CA23849272B55AC39B0B30CD6A438A329FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\BrowserCheckerDB-2444460416\Login Data
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookies.sqlite-shm

Path C:\Users\Admin\AppData\Local\Temp\BrowserCheckerDB-2950807496\cookies.sqlite-shm
Size 32KB
SHA256 fd4c9fda9cd3f9ae7c962b0ddf37232294d55580e1aa165aa06129b8549389eb
MD5 b7c14ec6110fa820ca6b65f5aec85911
SHA1 608eeb7488042453c9ca40f7e1398fc1a270f3f4
SHA512 d8d75760f29b1e27ac9430bc4f4ffcec39f1590be5aef2bfb5a535850302e067c288ef59cf3b2c5751009a22a6957733f9f80fa18f2b0d33d90c068a3f08f3b0
SSDEEP 3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\BrowserCheckerDB-3123245297\Login Data
Size 50KB
SHA256 92deb9024ca49204bb9a97b2936ac1aaf6e20e437ed40db53a5409bf801c0a20
MD5 9625c2e35b5d9a880a08161bdbb8e27a
SHA1 1441f4838a6ba52b6116c16a4e67dec8eeab6f92
SHA512 5925fbe50c4f8c34d1ad55992d67c5a997410207e3180733ff1a6fb1866b6b467067d17ab77d256335f71e137ed817b1289bed759529a15cf459bea1c023de17
SSDEEP 96:MkYUCn8MouB6w9fUP3mwilmqUvJKLReyG32ff44:uUG7Iw9f2iwcf4
TLSH
T13433451F2F682802C8698632BCB155F2AD7CA13F4B53AED22CB554354DB5852F02D5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\BrowserCheckerDB-834783901\Cookies
Size 24KB
SHA256 4cc1a146d871eea502899024db7a2ff4ab46d4e787819a0fd75cc74aa7dd9926
MD5 f20c4b926daf368f14b347d55a16cb41
SHA1 aedbb95b2328494e27a76d02ac5409154865d9c3
SHA512 8ec39bf908f1781a50fd054587a2b64f9051fc79ed1482674be1936f614d20bbc49dcef5033e1ecf2f219345414230b4421305de76ba25b28c49d3521d953885
SSDEEP 24:TL8z/bXYFpFNYbatyTM2Wkweka60y6UwbdQ9rPWTZ61:TQz/LopFMaty423w/a9NUuT
TLSH
T140B2594D1F307220C0F44B36EDD189572F7C211CD3A326599E1810F3DE925ABF61956A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Browser_Activity_Report.txt

Path C:\Users\Admin\AppData\Local\Temp\Browser_Activity_Report.txt
Size 4KB
SHA256 1a753f645709912ed1ab469ff9dab81a440bab99ba8f5a7c62c5e5b8058c4247
MD5 0ad726ef75d73b3c217d874c3e28a22e
SHA1 556511c553634ca79f74b9a3a98ef6787a82954d
SHA512 d5b363e7d55bd56357b3374ef46b05bf4786c69d3b75e92d4daa399ed182f3b01e73d9b71dfd57a5501d4e45fcd101abd85d562856dd2adab3c6da88c811a44d
SSDEEP 96:yxkARXg6zMX38E3hPePVKzrnA18hw3AXRfWcV:yxk2g6YX38E3hPeG9HYcV
TLSH
T1B4A133EF9E08391C56B4D2B7A9C42233FD95B21E8C11F5D0BA5E51DC9321369C84E8EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads