General
- Target 2026-08-23_1f9872fd7ac64d900183b25048cf0372_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 84.7MB
- Sample260824-telnnawvey
- SHA256 1e705332d6443c7e5fdfb2afb3f08b709e46d3eb38c330579bd026b3303ac6f5
- MD5 1f9872fd7ac64d900183b25048cf0372
- SHA1 d1c0ee3780b905a97126bc40139e9db441c4b5b5
- SHA512 7211ce6971a0a510035585fdb6d2a9bf4b45cf31c466940e69cb6e6131dbe92d7d4f9aae60ac190c5deb87a4fced7b6b469cfc24b2d04a47d9114bdf34859168
- SSDEEP 1572864:bKhsWQnakAK54v37gFg2C8Xpij+QfTCUHlyWg9ANJ5Ybs8300:+WWlbIMxc4ieTpM9sITk0
- TLSH T168183357BD9510B4C4CAC638847B92127721BC894B3177E32F56A7B82E727C0AEB9F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_1f9872fd7ac64d900183b25048cf0372_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_1f9872fd7ac64d900183b25048cf0372_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_1f9872fd7ac64d900183b25048cf0372_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 84.7MB
- SHA256 1e705332d6443c7e5fdfb2afb3f08b709e46d3eb38c330579bd026b3303ac6f5
- MD5 1f9872fd7ac64d900183b25048cf0372
- SHA1 d1c0ee3780b905a97126bc40139e9db441c4b5b5
- SHA512 7211ce6971a0a510035585fdb6d2a9bf4b45cf31c466940e69cb6e6131dbe92d7d4f9aae60ac190c5deb87a4fced7b6b469cfc24b2d04a47d9114bdf34859168
- SSDEEP 1572864:bKhsWQnakAK54v37gFg2C8Xpij+QfTCUHlyWg9ANJ5Ybs8300:+WWlbIMxc4ieTpM9sITk0
- TLSH T168183357BD9510B4C4CAC638847B92127721BC894B3177E32F56A7B82E727C0AEB9F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of NtSetInformationThreadHideFromDebugger