General
- Target 2026-10-01_191dd33879d6bcd5d105010fe5184ac2_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 5.6MB
- Sample261002-xtncksyyaz
- SHA256 77f7acf89a9d4e90e6dd7f8528604796c9f946d7c296b810e96186f039a95f14
- MD5 191dd33879d6bcd5d105010fe5184ac2
- SHA1 80487a00ab2986c4525019f280460bb1fad8df8e
- SHA512 3741d9094c4f2c777afe038a4352925f87af5eeb71ae4a1961fe86e11bedbb212a282dfdae427144576067221797a0613a98adec558d22f53e35040eff0f6a5c
- SSDEEP 49152:TuXA45UnYR9ntqjp0sXEKgufeePafFrzss+6Zi/sPiGz2c5VY43CwD8S18/iwMOg:eeSF18INr
- TLSH T1D6562913728850ECC54BE37145B16B6A26F13C9E9232774B4FA5BEA02F267D52FB4B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_191dd33879d6bcd5d105010fe5184ac2_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_191dd33879d6bcd5d105010fe5184ac2_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_191dd33879d6bcd5d105010fe5184ac2_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 5.6MB
- SHA256 77f7acf89a9d4e90e6dd7f8528604796c9f946d7c296b810e96186f039a95f14
- MD5 191dd33879d6bcd5d105010fe5184ac2
- SHA1 80487a00ab2986c4525019f280460bb1fad8df8e
- SHA512 3741d9094c4f2c777afe038a4352925f87af5eeb71ae4a1961fe86e11bedbb212a282dfdae427144576067221797a0613a98adec558d22f53e35040eff0f6a5c
- SSDEEP 49152:TuXA45UnYR9ntqjp0sXEKgufeePafFrzss+6Zi/sPiGz2c5VY43CwD8S18/iwMOg:eeSF18INr
- TLSH T1D6562913728850ECC54BE37145B16B6A26F13C9E9232774B4FA5BEA02F267D52FB4B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext