General
- Target 2026-08-21_6a2837a3a1f3f6b1a4b78c80803c9924_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 88.0MB
- Sample260821-b619batzb1
- SHA256 f9a191515e3633b976078559bb7eab2ef6143bfd664e4af2de0c0ab7eb2410e0
- MD5 6a2837a3a1f3f6b1a4b78c80803c9924
- SHA1 81412894c1e2c1fcacbf5fbcad089d00ec826b1e
- SHA512 c0706cca458f90e32b4b00efa0a2dc7cb9d535ae723fbdee72f87231c7e392cff8ab8a32293d2456a91ad67db0f3c38aca3b581af9e0ae632977739bbe28783f
- SSDEEP 1572864:6DbVMFhYIQvhMm7O3Qud3g+AcexkjtCuiuG4KTOanztiUMN29so3c:+bKnY1vym7ODd3NexkjAusOUtKM9Y
- TLSH T1DE183303BDA541A4C49EA738C9A79642BB777888873133D72E50BA383F76BC46D79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_6a2837a3a1f3f6b1a4b78c80803c9924_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_6a2837a3a1f3f6b1a4b78c80803c9924_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_6a2837a3a1f3f6b1a4b78c80803c9924_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 88.0MB
- SHA256 f9a191515e3633b976078559bb7eab2ef6143bfd664e4af2de0c0ab7eb2410e0
- MD5 6a2837a3a1f3f6b1a4b78c80803c9924
- SHA1 81412894c1e2c1fcacbf5fbcad089d00ec826b1e
- SHA512 c0706cca458f90e32b4b00efa0a2dc7cb9d535ae723fbdee72f87231c7e392cff8ab8a32293d2456a91ad67db0f3c38aca3b581af9e0ae632977739bbe28783f
- SSDEEP 1572864:6DbVMFhYIQvhMm7O3Qud3g+AcexkjtCuiuG4KTOanztiUMN29so3c:+bKnY1vym7ODd3NexkjAusOUtKM9Y
- TLSH T1DE183303BDA541A4C49EA738C9A79642BB777888873133D72E50BA383F76BC46D79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger