General
- Target 2026-08-20_adc10af7ac8518327321a24c442e95a1_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 88.2MB
- Sample260820-xj5twatejf
- SHA256 a83e7cd47bb311839f7ee2e06f7da81821121d6d289b8cad797a31b62d41a1dd
- MD5 adc10af7ac8518327321a24c442e95a1
- SHA1 108598994580c051245b2d07c9fe12938b75f99b
- SHA512 5e2ca2de23f04bd5b0675905a681ff137c16c57b4f6901bbf71fe3674a476cbccd76a25c02c98ef3a325f552a57e531a25ce443eb22146835d04c298df0a2f99
- SSDEEP 1572864:zVDexubwGr4VBPkNJPVMRHjvLEXLiRfpxqkEKRtdGUyP8j/jStdbi+Gina:M+QVp+EjvLE7uxx9RtIUuSOi+GWa
- TLSH T1E2183313ECA605A9C4A99639C57B53427B34BC488B3137E72E50B6383F76BC0AE79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_adc10af7ac8518327321a24c442e95a1_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_adc10af7ac8518327321a24c442e95a1_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_adc10af7ac8518327321a24c442e95a1_frostygoop_ghostlocker_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 88.2MB
- SHA256 a83e7cd47bb311839f7ee2e06f7da81821121d6d289b8cad797a31b62d41a1dd
- MD5 adc10af7ac8518327321a24c442e95a1
- SHA1 108598994580c051245b2d07c9fe12938b75f99b
- SHA512 5e2ca2de23f04bd5b0675905a681ff137c16c57b4f6901bbf71fe3674a476cbccd76a25c02c98ef3a325f552a57e531a25ce443eb22146835d04c298df0a2f99
- SSDEEP 1572864:zVDexubwGr4VBPkNJPVMRHjvLEXLiRfpxqkEKRtdGUyP8j/jStdbi+Gina:M+QVp+EjvLE7uxx9RtIUuSOi+GWa
- TLSH T1E2183313ECA605A9C4A99639C57B53427B34BC488B3137E72E50B6383F76BC0AE79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger