General
- Target 2026-08-20_e5b5a50ed1dcda894ceeb1045778dffc_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 97.3MB
- Sample260820-xdqsrstcqb
- SHA256 b7b303a2ffb0acd6c7ff497584fc7a10ff0723940300f38c2b82d50c9034dd4d
- MD5 e5b5a50ed1dcda894ceeb1045778dffc
- SHA1 c6a2d95db40cbd7a5c15102b913de60dc5a6f79e
- SHA512 4e165365af32fc57ffe64dc46a140f8d38faa62e938463956ee29a9fe25e16cde2a717f5f20fac1e3f14bdcb92e95e88f6d6d40565a3d10b21a9ba1933e66289
- SSDEEP 3145728:SBItlgeiiK0EcHBYdtSyq01e/78xiU7sZNC:UVfcHWH5q0k/783Mc
- TLSH T15F283307BC9548A9C4A5AB34CAB392927774B848473263D32E60EB783FB77E05D76710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_e5b5a50ed1dcda894ceeb1045778dffc_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_e5b5a50ed1dcda894ceeb1045778dffc_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_e5b5a50ed1dcda894ceeb1045778dffc_frostygoop_ghostlocker_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 97.3MB
- SHA256 b7b303a2ffb0acd6c7ff497584fc7a10ff0723940300f38c2b82d50c9034dd4d
- MD5 e5b5a50ed1dcda894ceeb1045778dffc
- SHA1 c6a2d95db40cbd7a5c15102b913de60dc5a6f79e
- SHA512 4e165365af32fc57ffe64dc46a140f8d38faa62e938463956ee29a9fe25e16cde2a717f5f20fac1e3f14bdcb92e95e88f6d6d40565a3d10b21a9ba1933e66289
- SSDEEP 3145728:SBItlgeiiK0EcHBYdtSyq01e/78xiU7sZNC:UVfcHWH5q0k/783Mc
- TLSH T15F283307BC9548A9C4A5AB34CAB392927774B848473263D32E60EB783FB77E05D76710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger