General
- Target 2026-09-29_262488c945e046335d43a6eff3b2b271_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 94.8MB
- Sample260930-2y484stscv
- SHA256 a151e1725507dcbc6415a580498fa3c7085b281c14f229144fc6273bac277b6f
- MD5 262488c945e046335d43a6eff3b2b271
- SHA1 f79221635be92c58fd72a836cfa1f6c99e1c4746
- SHA512 996990cbf1a43fc19f6c39803880c4f0f556bb3737802d8441b5172dfa464414ac951509cccaa2293fc7857c84a5a27b4602b6f6705e2198f79434c51ae07a28
- SSDEEP 1572864:g9aFHu7UO1Q/20Db0+3WGRX1ien1GGGlI7u7F0wvKmH4YDMy+J+VejigQ0fc/ZB8:zHu7Ub20Dh3WgliBjIg0j2LVaPQSaZB8
- TLSH T1BC28121B72C410ECDA4BD27144B45D7E23B23DAE5623B78E0E95BED02F127966F24E48
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_262488c945e046335d43a6eff3b2b271_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_262488c945e046335d43a6eff3b2b271_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vidar
Version
-
3.6
Botnet
-
16cad2ac71d37143f9ac7635a373ca71
C2
-
https://2.28.206.197
-
https://telegram.me/j88hor
-
https://community.fandom.com/wikia.php?controller=UserProfile&method=getUserData&format=json&userId=64296247
-
https://steamcommunity.com/profiles/76561198633950250
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/150.0.0.0 YaBrowser/26.8.0.0
Targets
-
- Target 2026-09-29_262488c945e046335d43a6eff3b2b271_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 94.8MB
- SHA256 a151e1725507dcbc6415a580498fa3c7085b281c14f229144fc6273bac277b6f
- MD5 262488c945e046335d43a6eff3b2b271
- SHA1 f79221635be92c58fd72a836cfa1f6c99e1c4746
- SHA512 996990cbf1a43fc19f6c39803880c4f0f556bb3737802d8441b5172dfa464414ac951509cccaa2293fc7857c84a5a27b4602b6f6705e2198f79434c51ae07a28
- SSDEEP 1572864:g9aFHu7UO1Q/20Db0+3WGRX1ien1GGGlI7u7F0wvKmH4YDMy+J+VejigQ0fc/ZB8:zHu7Ub20Dh3WgliBjIg0j2LVaPQSaZB8
- TLSH T1BC28121B72C410ECDA4BD27144B45D7E23B23DAE5623B78E0E95BED02F127966F24E48
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents