General
- Target 2026-09-29_3aaab75c2ccadeb50db56f77ac937f33_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 5.5MB
- Sample260930-ddbjasxt3k
- SHA256 fb2fe3282c471c8864bf4f1dc271ff008f1f524564b20725a1ed1ae97448ba2b
- MD5 3aaab75c2ccadeb50db56f77ac937f33
- SHA1 74622725a12bf9e55e36eb2a3965394be1e53934
- SHA512 968fcc48e9f0658319897f77e3fd3817bface81adde90da6821aefe2fd93d48219e0381773f85342525a3ff457a2a7aa1740a58734c1e1b5d59aba2133c3ed2e
- SSDEEP 49152:0mf1ojM+hncGsbAoYUNRGRcMZ4p6xeA2lTNk8cpJlEOIZ8teNijTeFXdmNsI:5feCPTNk8YEOIZ8ROXA
- TLSH T1A2464903BE5584B5D4A9E630C4B38212B7357C8C873563DB2EA0BA746F777D06AB9B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_3aaab75c2ccadeb50db56f77ac937f33_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_3aaab75c2ccadeb50db56f77ac937f33_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_3aaab75c2ccadeb50db56f77ac937f33_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 5.5MB
- SHA256 fb2fe3282c471c8864bf4f1dc271ff008f1f524564b20725a1ed1ae97448ba2b
- MD5 3aaab75c2ccadeb50db56f77ac937f33
- SHA1 74622725a12bf9e55e36eb2a3965394be1e53934
- SHA512 968fcc48e9f0658319897f77e3fd3817bface81adde90da6821aefe2fd93d48219e0381773f85342525a3ff457a2a7aa1740a58734c1e1b5d59aba2133c3ed2e
- SSDEEP 49152:0mf1ojM+hncGsbAoYUNRGRcMZ4p6xeA2lTNk8cpJlEOIZ8teNijTeFXdmNsI:5feCPTNk8YEOIZ8ROXA
- TLSH T1A2464903BE5584B5D4A9E630C4B38212B7357C8C873563DB2EA0BA746F777D06AB9B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.