General
- Target 2026-08-23_d494cfda94cdf97cb96d948d8e1bdf44_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 89.0MB
- Sample260823-yfl32avtct
- SHA256 0f90390f78c8839792fd60c98f0428854fa68b5387d5445ce243f7751475b822
- MD5 d494cfda94cdf97cb96d948d8e1bdf44
- SHA1 d184c68ccbf13cd13c64a95c27f6612c8c17901b
- SHA512 651f2b29674ce176366a2b5777a4cddc525646f849a946c81ade0bedb3ae1b71fbd99b2e169d8f4129f9baecdd52eb68519ec800be68430a6d665dd78f47abd6
- SSDEEP 1572864:6DpP4TFnZVv1K42qEhylMy8UYsNaCVsryeJlbRmzmTK4F1k4:+V4TvVv1Z2hFyIsNaOveJqzEK4V
- TLSH T145283303BDA505A5C49EA734C9A79642BB777C98873223E72E10BA383F767D05D78B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_d494cfda94cdf97cb96d948d8e1bdf44_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_d494cfda94cdf97cb96d948d8e1bdf44_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_d494cfda94cdf97cb96d948d8e1bdf44_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 89.0MB
- SHA256 0f90390f78c8839792fd60c98f0428854fa68b5387d5445ce243f7751475b822
- MD5 d494cfda94cdf97cb96d948d8e1bdf44
- SHA1 d184c68ccbf13cd13c64a95c27f6612c8c17901b
- SHA512 651f2b29674ce176366a2b5777a4cddc525646f849a946c81ade0bedb3ae1b71fbd99b2e169d8f4129f9baecdd52eb68519ec800be68430a6d665dd78f47abd6
- SSDEEP 1572864:6DpP4TFnZVv1K42qEhylMy8UYsNaCVsryeJlbRmzmTK4F1k4:+V4TvVv1Z2hFyIsNaOveJqzEK4V
- TLSH T145283303BDA505A5C49EA734C9A79642BB777C98873223E72E10BA383F767D05D78B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger