General
- Target 2026-09-04_68a302bd4a8f9bd9a533b3f80771e21f_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 94.1MB
- Sample260905-j82a4azgkf
- SHA256 593b391a23ff56696eb2ba54a45ec5eb9c6c574d2b45f5da8ef324cfa3dca95e
- MD5 68a302bd4a8f9bd9a533b3f80771e21f
- SHA1 1673484eda0df81c82544935795534d40ea46396
- SHA512 37a43adf740332a6b1fa20002f1446ec3bb4d1d4e41e971cf6ff0f13a2c14c4f35e5dd0ae251c826a6669c8104e5290639af5921e4aff3b0f1a2d095ef7a7371
- SSDEEP 1572864:cPu1innTA/MUU6RXj3lrCJwIe+udZy1e9NfX9uLAgeVufKV5crN/j+W59OW7L/:uBTA/MhUj3cheR8yZX9tT5c5B591H
- TLSH T1C92833037CA564A4CADA9638D2B642427734784E9B3033EB2F92F2B42F767E15B75311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_68a302bd4a8f9bd9a533b3f80771e21f_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_68a302bd4a8f9bd9a533b3f80771e21f_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.2
Botnet
-
8871af746e869f200c6d738cc0b3bb1d
C2
-
https://46.62.133.5
-
https://telegram.me/nag0e
-
https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=63727183
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0
Targets
-
- Target 2026-09-04_68a302bd4a8f9bd9a533b3f80771e21f_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 94.1MB
- SHA256 593b391a23ff56696eb2ba54a45ec5eb9c6c574d2b45f5da8ef324cfa3dca95e
- MD5 68a302bd4a8f9bd9a533b3f80771e21f
- SHA1 1673484eda0df81c82544935795534d40ea46396
- SHA512 37a43adf740332a6b1fa20002f1446ec3bb4d1d4e41e971cf6ff0f13a2c14c4f35e5dd0ae251c826a6669c8104e5290639af5921e4aff3b0f1a2d095ef7a7371
- SSDEEP 1572864:cPu1innTA/MUU6RXj3lrCJwIe+udZy1e9NfX9uLAgeVufKV5crN/j+W59OW7L/:uBTA/MhUj3cheR8yZX9tT5c5B591H
- TLSH T1C92833037CA564A4CADA9638D2B642427734784E9B3033EB2F92F2B42F767E15B75311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Windows executables referencing non-Windows User-Agents