General
- Target 2026-08-22_1eb0b18d5cd9f8915e229868408ac0e6_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 96.0MB
- Sample260822-e8ckhs1clb
- SHA256 d5ab9441308cbb928af31f273af3af6cd11dd72bcab0e822e91b6973fc59c0fd
- MD5 1eb0b18d5cd9f8915e229868408ac0e6
- SHA1 f222c547651855056e0183ef2a3aa42690048686
- SHA512 6f66f7ee5e3f8a5c20a89c33c7ec49ec2473ee7b5763395d1493e41e56d098aa31c6403cbca6fa399d0957e877f1329b24d57e323eaf1aa1ce543c236bfb937b
- SSDEEP 3145728:MK2dRSu1uM+VZGsi7Aba0fBFOPUJvrlsnfk4xyZ:MK2dRXgM+zGsnNpF+0nZ
- TLSH T101283307BDA505A5C0AA9738C9AB97527B757C88873237E72F20A6383F727D05E79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_1eb0b18d5cd9f8915e229868408ac0e6_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_1eb0b18d5cd9f8915e229868408ac0e6_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_1eb0b18d5cd9f8915e229868408ac0e6_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 96.0MB
- SHA256 d5ab9441308cbb928af31f273af3af6cd11dd72bcab0e822e91b6973fc59c0fd
- MD5 1eb0b18d5cd9f8915e229868408ac0e6
- SHA1 f222c547651855056e0183ef2a3aa42690048686
- SHA512 6f66f7ee5e3f8a5c20a89c33c7ec49ec2473ee7b5763395d1493e41e56d098aa31c6403cbca6fa399d0957e877f1329b24d57e323eaf1aa1ce543c236bfb937b
- SSDEEP 3145728:MK2dRSu1uM+VZGsi7Aba0fBFOPUJvrlsnfk4xyZ:MK2dRXgM+zGsnNpF+0nZ
- TLSH T101283307BDA505A5C0AA9738C9AB97527B757C88873237E72F20A6383F727D05E79700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger