General
- Target 2026-08-22_0eb44fd234b84ee1e4cc56c3925d82d2_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 93.8MB
- Sample260823-pv7tlsac28
- SHA256 c591b03f658e14e41f7fc36972d799b60a111cab8416bfe0ba01f88405e7de63
- MD5 0eb44fd234b84ee1e4cc56c3925d82d2
- SHA1 b491c408a264b16b0729f5669f1e1aea9ad2bc80
- SHA512 df8599e1133976dda09303866f7df2b5fe0c615255edb8a7afda86ea7aa39439a5aa0d2ecd397c1e1743ed8ca039845ae0505e770cba9935b4a24ea8004fca97
- SSDEEP 1572864:8Y5bw3CT03wUtfQr7HTFiawWY6ywiPyzmO9DBFGfvXltGj93vqD+6aLmUsUC6Bs:H50yY3wIyfFob6ydqiaDBFStG53vqy9I
- TLSH T16C2833137C9941A5D4AADE35C4B783533A20F88DDB3427A35E50BA382FB57C29D7AB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_0eb44fd234b84ee1e4cc56c3925d82d2_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_0eb44fd234b84ee1e4cc56c3925d82d2_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_0eb44fd234b84ee1e4cc56c3925d82d2_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 93.8MB
- SHA256 c591b03f658e14e41f7fc36972d799b60a111cab8416bfe0ba01f88405e7de63
- MD5 0eb44fd234b84ee1e4cc56c3925d82d2
- SHA1 b491c408a264b16b0729f5669f1e1aea9ad2bc80
- SHA512 df8599e1133976dda09303866f7df2b5fe0c615255edb8a7afda86ea7aa39439a5aa0d2ecd397c1e1743ed8ca039845ae0505e770cba9935b4a24ea8004fca97
- SSDEEP 1572864:8Y5bw3CT03wUtfQr7HTFiawWY6ywiPyzmO9DBFGfvXltGj93vqD+6aLmUsUC6Bs:H50yY3wIyfFob6ydqiaDBFStG53vqy9I
- TLSH T16C2833137C9941A5D4AADE35C4B783533A20F88DDB3427A35E50BA382FB57C29D7AB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger