General
- Target 2026-08-21_bf49db55606423693273c7bb5f3e972d_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 92.0MB
- Sample260822-hjaleaed92
- SHA256 8af1fe8f15f54cb965607ac9ef0751cff89a4db3e7b4d7130c0da9edc6420813
- MD5 bf49db55606423693273c7bb5f3e972d
- SHA1 4c7dd7969cb5cff0350e4cd8d4d33039ee402339
- SHA512 8394811d9a2ff8df9c683f142d327225e59997602d8ecc9f23456bb96f4093e40ce2fdadf098491bfc31d271488bce0bf741f3422f5001e6054c32f488f24577
- SSDEEP 1572864:dDoy5C125SypqxsHSYzHrcdTV/kqvYBQSBODN0K5B/M0wS404P++r6B+hhIG:5825SypCsyYjuOgN03P55hyG
- TLSH T133283307BCA505E5C0AAA738C9BB96527B757C888B3233D72E2066383F767C06E75345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_bf49db55606423693273c7bb5f3e972d_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_bf49db55606423693273c7bb5f3e972d_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_bf49db55606423693273c7bb5f3e972d_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 92.0MB
- SHA256 8af1fe8f15f54cb965607ac9ef0751cff89a4db3e7b4d7130c0da9edc6420813
- MD5 bf49db55606423693273c7bb5f3e972d
- SHA1 4c7dd7969cb5cff0350e4cd8d4d33039ee402339
- SHA512 8394811d9a2ff8df9c683f142d327225e59997602d8ecc9f23456bb96f4093e40ce2fdadf098491bfc31d271488bce0bf741f3422f5001e6054c32f488f24577
- SSDEEP 1572864:dDoy5C125SypqxsHSYzHrcdTV/kqvYBQSBODN0K5B/M0wS404P++r6B+hhIG:5825SypCsyYjuOgN03P55hyG
- TLSH T133283307BCA505E5C0AAA738C9BB96527B757C888B3233D72E2066383F767C06E75345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger