General
- Target 2026-10-01_c835de339abfd62910a25781df24ed84_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 8.6MB
- Sample261003-xtv3esxsft
- SHA256 07d54209ec87f9677164c1d934b92812ed848152aa48e849b0c3f6e98c4b07c3
- MD5 c835de339abfd62910a25781df24ed84
- SHA1 ff7d21815acaab4fb084a514f1894b8e92f2d265
- SHA512 4cf29d7b89ac5dbfc68a4ac8b1c5f6b689a41e07c1a842da7e51af9461ee87ce4c9c1c9d148b2f1353f6cf3144a47fd4b0e5d81a86ef8388a98a389f33eff0f5
- SSDEEP 49152:1oWtQfldp3P9vVNKIowac9iqEW4rsTllgNAeRx9cFnNH1JP+TsY0szo2bYY7QJG:lk5OauAG9P
- TLSH T1F496B403774814C8C957EFB084B0992A21B13CAD49357B6F8ED87E642F1A7996BBDF04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_c835de339abfd62910a25781df24ed84_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_c835de339abfd62910a25781df24ed84_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_c835de339abfd62910a25781df24ed84_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver
- Size 8.6MB
- SHA256 07d54209ec87f9677164c1d934b92812ed848152aa48e849b0c3f6e98c4b07c3
- MD5 c835de339abfd62910a25781df24ed84
- SHA1 ff7d21815acaab4fb084a514f1894b8e92f2d265
- SHA512 4cf29d7b89ac5dbfc68a4ac8b1c5f6b689a41e07c1a842da7e51af9461ee87ce4c9c1c9d148b2f1353f6cf3144a47fd4b0e5d81a86ef8388a98a389f33eff0f5
- SSDEEP 49152:1oWtQfldp3P9vVNKIowac9iqEW4rsTllgNAeRx9cFnNH1JP+TsY0szo2bYY7QJG:lk5OauAG9P
- TLSH T1F496B403774814C8C957EFB084B0992A21B13CAD49357B6F8ED87E642F1A7996BBDF04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext